Fix permission checking on /quiz-question/add/*.