When a self service action is unable to be executed due to the dynamic permissions not allowing the execution, the error message logged provides no context about what specific part of the dynamic permission caused the action to be denied.
This makes troubleshooting and building permissions incredibly difficult as you have no idea what part of the permissions policy/condition caused the error.
The error message should explain what aspect of the policy's query/condition caused the rejection of the execution.