Add link to PHP-CS-Fixer issue
Permission check on all CRUD operations (except listing)