Added permission checking for webservice XML response

Added permission checks for returning each element to user from XML
webservice