[Foundation-l] Expanding CheckUser permissions