Forbids entry to requests if a permission is not found in an object