Fix permissions routes. refs #78