Security Modifications

- Admin role allowed to do anything
- RO role allowed only to read
- RW role allowed to create objects only under parent which owned by
current user or if parent isn't owned by anyone ( createdBy == null );
also this role is allowed to delete/modify only owned objects
and is allowed to read all objects in the system