Card #92 basic permissions check todo