CheckList permissions GET API endpoint