New flow to abstract out recurring path_info -> check_permission sequence