Add some permissions enforcement for request routes.