4.3 version of api_check_permission

this one needs testing