NEW: handle "no permission to access record" error