show if permission is available via Web API