permission look up function

permission look up function