Add permissions check