I agree that this might should be something else.  I don't know if the service should house this, maybe this should live in the permissionHelper as possibly a registry layer?  Thoughts?