Use the correct object when checking api permission types