Added permission validation for problems controller