protected function onNotAllowed() { throw new Exception(ErrorCodes::ACCESS_DENIED, 'Operation is not allowed'); }