NotAuthorizedError means not permitted