#201725 by bdragon: access control was renamed to permissions but this was not reflected in two remaining permission checks