AccessDenied added to API