Added permission check in application service.