permission check practice