* Implemented link functionality (without group-security)
* Added group-security for link operations
* Refactored access check in link model
* Changed return status of access check failure from 403 to 409
- This is to cover both cases of the user not having permissin and the group not existing