BZ-10032 check portfolio permissions