Javascript permission checking (requires underscore.js)