check permissions for logged in user