Factors out permissions check from User into PermissionManager service