Permissions

I might call this `verify_coach` or similar. "Check" could mean either thing, y'know?