Refactor permissable

Investigating:
- rely on permissions check done by canThis()
- permission check can be overruled by permissable