permission checking slightly further along