Add missing permission checks