This seems like a perfect use case for:
Set up default redirects when forbidden/unauthorised, show errors when something fails...