Include user permissions for flagging CV