Added permission checking for tags (project)