Refactoring: moved isAllowed code into Permissions class
Permissions for content actions