#5: Ensured that the appropriate actions can only be called by users with the correct permissions.