Add assertions to permissions