Implemented rights checking for items, close #17