> Here is a good place for the permission check. Something like:
yes, it is.

> Also the layout already returns HTML so why add it as param? Wouldn't be the same: ...

Not really, as the JLayout does adjust the passed HTML (and as it's a JLayout, other templates can have their own override for their own markup if needed).