added PermissionDeniedExceptionWrapper