POST: Added permission declaration