[PATCH] sanitize ->permission() prototype