Fixed permission checks