#3 Fix and simply permission checks