Added permissions check to change customer status