Add permission check for HtmlPurifier