Add: proposal URL permission authentication