LPS-27013

Hey Ray, sending this to you for final review but it looks good to me. My only concern with the original pr was the generic PortalException that was thrown but Sampsa replaced it with LayoutPermissionException which seems more appropriate and still won't cause infinite redirect loop. CC @juliocamarero