don't throw on permission check lol

src/users/permissions.rs

@@ -31,6 +31,7 @@ impl User {
             return Ok(true);
         }
 
-        todo!("Do the permission checking here once permissions are modeled in the DB")
+        Ok(false)
+        // todo!("Do the permission checking here once permissions are modeled in the DB")
     }
 }