Shield Required Permissions for API Actions