Add authorization checks