for our application, when we want to figure out what a user can do on the frontend for the purposes of showing things, we're making a set of permission checks using

BulkCheck

and then displaying according to those results