Don't you want to get the logged in user and authorize them for read access on permissions? I assume not anyone is able to read  conference permissions. Otherwise, you can remove the authCode parameter.