passing the request to permission model

This is intentend for cases where you need to check for values on
cookies and the session hash for example.