Add permission control to dashboard