These checks should be done using validators, since they usually depend on permissions caller has.
These checks should be done using validators, since they usually depend on permissions caller has.