Permission checks in the User object.