Added permission checks for all actions in StatusController