DataAPI uses an interface instead of the bouncer
finished permissions API with interfaces