implement helper to check if we can modify permission