* RBAC: add an additional check before fetching permissions * Nit. * Readd removed test * change message