This should actually check the superadmin role, not permission.