Permission update

Only allow those with viewRoomBooking to access list