The returnvalue in the function getPermissions (&$record) is Dataface_PermissionsTool::ALL(). But if I log in with a valid user the URL redirect .