Moved permission checking into wrapper function

- auth.check_permission() handles permission checking