[PATCH conductor 3/3] Redmine #3158: Use denormalized model for permission checks