Ugly checking for permissions in methods
back to Method based update after horrifying detour throug allow/deny