Actually check permissions and verity entity