we're using a component that makes

CheckPermission

calls through an intermediate application, where you can give it a list of permissions and an object identifier and it will ask whether the user has those permissions on the object