Basic permission check on user