Add permission check to manage