Extract permissions from session object instead of retrieving them with a call to /me/permissions