add flash only if correct user and redirect then

src/Controller/OfferController.php

@@ -130,12 +130,14 @@ class OfferController extends AbstractController
         {
                 $this->entityManager->remove($offer);
                 $this->entityManager->flush();
-            } 
-
                 $this->addFlash(
                     'success','Successfully removed offer!'
                 );
     
                 return $this->redirectToRoute('user_page');    
         } 
+
+        throw new HttpException(403, "No permission");
+        
+    }
 }