Updated permissions for routes