Permissions checking in place for cms notifications