simplify no permission found logic and remove more is("service") logic.