bump version to 2.3-4
fix access rights

Try to use $rpcenv->check_volume_access() everywhere.