taking connection permission mask into account.