- throwing exception from permissions controller