Permission calculations can only done in the primary server thread