Add permissions for actions

Summary

Some actions need a permission check, that they can only performed by certain users.

Steps to reproduce

...

Example URL

What is the current bug behavior?

What is the expected correct behavior?

Acceptence Criterias

• actions are identified and permissions are added