Phase 2 fix remaining RBAC safe responses and work route aliases

app/modules/marketplace/ui.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 from fastapi import APIRouter, Form, Request
 from fastapi.responses import RedirectResponse
+from app.core.http_responses import not_found_response
 
 from app.core.db.common import CommonSessionLocal
 from app.core.security.csrf import get_or_create_csrf_token, validate_csrf
@@ -289,7 +290,7 @@ def lead_detail(request: Request, lead_id: int):
             return response
         lead = get_marketplace_lead(db, lead_id)
         if not lead:
-            return RedirectResponse(url="/marketplace/leads", status_code=303)
+            return not_found_response(request, "Marketplace lead not found")
         return _render(request, "modules/marketplace/templates/marketplace/lead_detail.html", db, user, title=f"Lead {lead.lead_no}", lead=lead, audit_firms=list_reference_audit_firms(db), branches=list_reference_branches(db, lead.assigned_tenant_id), partners=list_reference_partners(db, lead.assigned_tenant_id), can_assign=_has_perm(db, user, "marketplace_leads.assign"), can_update=_has_perm(db, user, "marketplace_leads.update"), can_convert=_has_perm(db, user, "marketplace_leads.convert"))
     finally:
         db.close()