It seems the code does exactly that: discriminate between permitted and non-permitted users.

So, if someone has no permission, then what ?