Add entity-specific permission checks.