Correct permission check mechenism