diff --git a/Admin/Routes/Web/Backend.php b/Admin/Routes/Web/Backend.php
index f6d9c79..d64645d 100644
--- a/Admin/Routes/Web/Backend.php
+++ b/Admin/Routes/Web/Backend.php
@@ -1,42 +1,75 @@
 <?php
 
 use phpOMS\Router\RouteVerb;
+use phpOMS\Account\PermissionType;
+use Modules\Marketing\Models\PermissionState;
+use Modules\Marketing\Controller;
 
 return [
     '^.*/backend/marketing/promotion/list.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingPromotionList',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::PROMOTION,
+            ],
         ],
     ],
     '^.*/backend/marketing/promotion/create.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingPromotionCreate',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::CREATE,
+                'state' => PermissionState::PROMOTION,
+            ],
         ],
     ],
     '^.*/backend/marketing/promotion/profile.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingPromotionProfile',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::PROMOTION,
+            ],
         ],
     ],
     '^.*/backend/marketing/event/list.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingEventList',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::EVENT,
+            ],
         ],
     ],
     '^.*/backend/marketing/event/create.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingEventCreate',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::CREATE,
+                'state' => PermissionState::EVENT,
+            ],
         ],
     ],
     '^.*/backend/marketing/event/profile.*$' => [
         [
             'dest' => '\Modules\Marketing\Controller:viewMarketingEventProfile',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::EVENT,
+            ],
         ],
     ],
 ];
diff --git a/Models/PermissionState.php b/Models/PermissionState.php
new file mode 100644
index 0000000..ee13630
--- /dev/null
+++ b/Models/PermissionState.php
@@ -0,0 +1,31 @@
+<?php
+/**
+ * Orange Management
+ *
+ * PHP Version 7.2
+ *
+ * @package    Modules\Marketing
+ * @copyright  Dennis Eichhorn
+ * @license    OMS License 1.0
+ * @version    1.0.0
+ * @link       http://website.orange-management.de
+ */
+declare(strict_types=1);
+
+namespace Modules\Marketing\Models;
+
+use phpOMS\Stdlib\Base\Enum;
+
+/**
+ * Permision state enum.
+ *
+ * @package    Modules\Marketing
+ * @license    OMS License 1.0
+ * @link       http://website.orange-management.de
+ * @since      1.0.0
+ */
+abstract class PermissionState extends Enum
+{
+    public const PROMOTION = 1;
+    public const EVENT     = 2;
+}