Use vault to check the permission