Determines whether or not a user has permission to do something.