Add missing permission checks.