You could do this with a permission class