Allow the current user to access the metrics without an API key if they have the required permission