Added permissions and auth