For permissions just check if the user is authenticated.