Wrong message when failing to add a user to a group

When trying to add a user to forbidden group the request returns a 403 status code as expected but the UI still says that that the "<user> is now member of <group>" instead of properly reporting the security exception.