Add permissions for actions
Summary
Some actions need a permission check, that they can only performed by certain users.
Steps to reproduce
...
Example URL
What is the current bug behavior?
What is the expected correct behavior?
Acceptence Criterias
-
actions are identified and permissions are added