[PATCH conductor 3/4] Redmine #3158: Use denormalized model for permission checks