Ensure user is authenticated for permission checks

Change-Id: I3c2eb33bf5cfbf361c0d0360ee6cce686d64d919