Add permission checks