checking if user has perms...