Add permissions and authentication