If you (for example) try to set the topic of a room, but don't have permissions (but your client has got out of sync so thinks you do), then the REST request will return a 403 but there is no indication of this in the UI so you are left guessing