Added extra permission-based security to each ManagementController method