require permissions for all methods