Support $contactId param in permission checks