permissions checks for ninja pages