diff --git a/src/main/java/org/opensearch/security/privileges/legacy/RestLayerPrivilegesEvaluatorImpl.java b/src/main/java/org/opensearch/security/privileges/legacy/RestLayerPrivilegesEvaluatorImpl.java
index 4ae80a208c..ec0b8f203c 100644
--- a/src/main/java/org/opensearch/security/privileges/legacy/RestLayerPrivilegesEvaluatorImpl.java
+++ b/src/main/java/org/opensearch/security/privileges/legacy/RestLayerPrivilegesEvaluatorImpl.java
@@ -95,7 +95,11 @@ public PrivilegesEvaluatorResponse evaluate(final User user, String routeName, f
             }
         }
 
-        return presponse;
+        if (presponse.allowed) {
+            return PrivilegesEvaluatorResponse.ok();
+        } else {
+            return PrivilegesEvaluatorResponse.insufficient(actions);
+        }
     }
 
     Set<String> mapRoles(final User user, final TransportAddress caller) {