support for permissions check in socket.io