Actually... There's a hasPermission method on the management rule dealio, so you shouldn't have to check it yourself... https://github.com/Islandora/islandora_xacml_editor/blob/7.x/api/includes/xacml.inc#L342-L347