exception leaking out in the case of deny