diff --git a/Admin/Routes/Web/Backend.php b/Admin/Routes/Web/Backend.php
index 08bec08..d09ed0f 100644
--- a/Admin/Routes/Web/Backend.php
+++ b/Admin/Routes/Web/Backend.php
@@ -1,54 +1,97 @@
 <?php
 
 use phpOMS\Router\RouteVerb;
+use phpOMS\Account\PermissionType;
+use Modules\Messages\Models\PermissionState;
+use Modules\Messages\Controller;
 
 return [
     '^.*/backend/messages/dashboard.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageInbox',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/outbox.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageOutbox',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/trash.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageTrash',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/spam.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageSpam',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/settings.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageSettings',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/mail/create.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageCreate',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::CREATE,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/backend/messages/mail/single.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageView',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
     '^.*/api/messages/mail/single.*$' => [
         [
             'dest' => '\Modules\Messages\Controller:viewMessageView',
             'verb' => RouteVerb::GET,
+            'permission' => [
+                'module' => Controller::MODULE_NAME,
+                'type'  => PermissionType::READ,
+                'state' => PermissionState::MESSAGE,
+            ],
         ],
     ],
 ];
diff --git a/Models/PermissionState.php b/Models/PermissionState.php
new file mode 100644
index 0000000..327607c
--- /dev/null
+++ b/Models/PermissionState.php
@@ -0,0 +1,30 @@
+<?php
+/**
+ * Orange Management
+ *
+ * PHP Version 7.2
+ *
+ * @package    Modules\Messages
+ * @copyright  Dennis Eichhorn
+ * @license    OMS License 1.0
+ * @version    1.0.0
+ * @link       http://website.orange-management.de
+ */
+declare(strict_types=1);
+
+namespace Modules\Messages\Models;
+
+use phpOMS\Stdlib\Base\Enum;
+
+/**
+ * Permision state enum.
+ *
+ * @package    Modules\Messages
+ * @license    OMS License 1.0
+ * @link       http://website.orange-management.de
+ * @since      1.0.0
+ */
+abstract class PermissionState extends Enum
+{
+    public const MESSAGE = 1;
+}