Add very basic permission checking.