on deny does not throw error