Sites checks user permissions before executing AJAX scripts