Re-apply: Factors out permissions check from User into PermissionManager service