fix(security): standardize permission error responses to reduce information disclosure

fix(security): standardize permission error responses to reduce information disclosure #7587