Description of problem:

Plugin authors need to continously repeat throwing a NotAllowedError("Unauthorized"). Instead of repeating that code the common rbac can expose an Unauthorized error class.

Steps to Reproduce

with current code:
if (decision.result == Deny) {

   throw NotAllowedError("Unauthorized")

}

Expected usage:

throw new UnauthorizedError();