Updated authorization rules to allow access role to update/create/destroy assignments