use permissionsForCached for authorizations
use cached permissions for authorize as well