Implementing missing authorization logic.
Added an Author role and update permissions accordingly.
Merge branch 'feature/authorization' into develop