Check permissions in has_permission method

This MR reframes the permission check. We do check for any errors in the has_permission method and if yes, we use the session framework to display the permission_denied_message to the user.

ping @housam.dibeh

closes #2 (closed)