Usually they do buy directly from the manufacturer and since they do buy from them, they do not need permission to resell. A lot of small stores do buy from bulk sites and resell and they do not need permission to do so.
I hope this answers your question.
Also, a great site for bulk candy is candyfavorites.com. They have all the classic candies and are known for having a huge old time candy collection too.