Add permission handling to the content controller