Bugfix: included brackets in permission param lookup