Ensure permissions exist when checking webhooks