add flash only if correct user and redirect then

src/Controller/OfferController.php

@@ -130,12 +130,14 @@ class OfferController extends AbstractController
         {
                 $this->entityManager->remove($offer);
                 $this->entityManager->flush();
-            } 
+                $this->addFlash(
+                    'success','Successfully removed offer!'
+                );
     
-            $this->addFlash(
+                return $this->redirectToRoute('user_page');    
-                'success','Successfully removed offer!'
-            );
-            
-            return $this->redirectToRoute('user_page');
         } 
+
+        throw new HttpException(403, "No permission");
+        
+    }
 }