Use the admin isGranted api to check if the user has access

Use the admin isGranted api instead of calling low level security context api direct