Adding missing permission check in ratethread.php