Added POST permissions for the API