we check it here https://github.com/okfn/ckan/blob/master/ckan/new_authz.py#L64