refactor enumeration permissions logic to require admin-ness of user to be passed in

[#55826364]