jeffd
committed
on 02 Oct 02
use permission api rather than hit db directly