Defer to MageController for cast permission checks