resolve symlinks when checking path permissions