2407: updated permissions check for rollback capability