ActionNotAllowed: policy violation - but why?