SECURITY-867 Use SecurityManager to check for permissions instead of AccessController