return nothing to ajax request if user has no write permissions