Set permissions for use with custom app api

Hello,
I have written custom app with custom api methods, calling them via /api/method/… but Users without role System Manager cannot access them, where can I set permissions for these methods? I am using @frappe.whitelist() decorator with python methods.

Thank you