Do permission check first to be a little faster, check more bypass permissions