get allowed vehicles for user
Optimised permission querys