 
                      (next)=> # check for user restriction and test identity.login
                         
-                        if user = (@data.permissions?[key]?.user || @data.permissions?.user)
+                        if user = (@permissions?[key]?.user || @permissions?.user)
                             
                             identity.login (err, login)=>
                                 next login is user

                
                checks = [
                    (next)=>
                        if @data.permissions?.__checks
                            for check in @data.permissions.__checks
                                do(check)=>
                                    checks.push (next)=>
                                        check.apply @, [identity, key, args, next]

                ,
                
                    (next)=> # custom check function - must callback true to permit!
                        if typeof (check = @permissions) is 'function' || typeof (check = @permissions?[key]) is 'function' || check = (@permissions?[key]?.check || @permissions?.check)
                            
                            check identity, key, args, next                            
                            
