comments #32 - permissions in controllers and views

Signed-off-by: Alexander Skjolden <alex@plastboks.net>