new SubRoute for checking permissions