Lino currently throws a server exception PermissionDenied when the user asks for a valid URL but has no permission to see it. Which happens usually when the server was upgraded while some clients still had a browser window open. That's not a reason to speak about "internal error". Also for some actions Lino checks permissions up to three times (once in the view, once in action_request() and once in kernel.run_action().