Added perms check
More descriptive POST return