you have to do a check per permission; you can do so in parallel