The API permission validation is done in application service, thus
remove the redundant code in permission handler.