removed duplicated code from #2875
use placeholder for permission checking in render_plugin tag