checks for permission before api/v2/types#index