When a user tries to access a staff-user-required endpoint without staff user access, it should return a 403 error but instead shows "too many redirects." This makes it difficult to distinguish problems related to a user's permissions from other issues.