check permissions in the loader before
cleaner implementation of the server
tests for the loader