Added security permission checking if current account has specified incoming contact request