Merge "Replace User::isAllowed with PermissionManager."