all tag types use permission helpers in AuthorizeHelpers