Song auth: modified abilities for Songs,Albums to force business logic on roles