// Otherwise, really go out and check our permissions.
Session sess = HibernateUtil.getSessionFactory().getCurrentSession();
sess.beginTransaction();
// Use a current instance of our user
User u = (User) sess.load(User.class, getId());
// Check user permissions
for (Object p : u.getPermissions()) {
if (((Permission) p).getCodeName().equals(perm)) {
sess.getTransaction().commit();