We can route the permission checking through the site using the has_{add,change,delete}_permission methods.