When a user accesses an area that has been restricted to them, they receive a 404 error. The page is not 'not found', but not allowed. A different notification should be present so that users understand why they are unable to access a page.