Add permissions checking for user settings.