separate the different actions when denying a user to make it easier to suppress the denial message