Use Forbidden valdiation error when no capability

Isn't it the value that's forbidden, not the field?