data is typed and submitted to backend using json
added permissions using the Secure annotation in dashboard