Added product permission check with entitlement endpoint