Add proper permission checks to Configuration Bundle related resources