Null users are no longer guaranteed to not be authorized

All users are allowed to access null permissions