Get permissions and username based on request object.