Fixed auth permissions for publish actions