HEAD backport: The permission levels are now checked when the authz instance is created. (gage)
Changed paths: