Add permissions to trend API controller.