Fix walkthrough block permission checking

Better to rely on permissions, not user roles.