Global permission check