Make permitted work with anonymous user