added permission check for bank.command