Added authorization for specific user actions