Added hasPermission to support routes