in that case will we have the opportunity to check permission even if it is not stored in the DB yet?