Added permissions for user in DeviceCommandController