Added authorization checks for subresources endpoints methods