New feature: declare necessary permissions in the ApplicationController.