Security Fix: added missing permission check for enable/disable border