use new syntax for permission checks