get permissions directly from share storage to avoid additional db calls