Added code to check for permission to perform create/update/destroy record ops.