Added backend checks for article permissions

Added permission checks to the controller