Shouldn't we be utilizing a permissions class for this logic instead?