Added permission check, but didn't implement it
Implemented the permission "user", and added some comments