Fixed typo (missing method call) and guard against malformed filter params.
Check whether user has perm for all stores, not just the one.
Removed spurious debugging print statement.