permission checked before publishing nodes