ENG-7050: move to single hasPermission model.