Restrict tagging to only users who have permission