Add permission check for the TabCollection's post operation