read permission checking