We are actually using a permissions class specified in the parent (`HasBuilderAuth`).  The more granular check (user is authorized for this app) could be ported to a PermissionsClass, but it's a bit more work and would require refactoring the other hook views.  Again I'm open to it, just not in this PR.