Added possibility to check for permissions based on req.params