Fix permissions that are checked
Add authorization header when checking permissions