Adds more permission specs for WP controller