Adding permission check on http