Use SecurityManager to check for permissions instead of AccessController