well, rather than adding the access restriction behavior to the page, use the show region behavior
select the region that should show if access is granted, and add a show region behavior, use the rule you are currently using thr for the Access restriction.
add the error message, and add a second show region, use the NOT <rule name> condition