you'd need to issue a lookup for each permission