since the snap module runs without permissions controls, verify the logged in channel matches the requested cloud path