Added permission check for likes