Fix looking into auth instead of auth->auth.perms.