Issue #3347873 by kristiaanvandeneynde, BramDriesen, smustgrave, Kingdutch, quietone, borisson_: Centralize permission checks in a service