Fix permission check to only look at current stage

DO NOT MERGE

Currently this is just testing which kind of tests break.

Related to #1040