I would be explicit here with the return values:

```
error_message = ""
return success, allowed_to_submit, error_message
```