Time for action – Add user capability checks