Access control for APIv3
Fix bulk_update for contact_assignments endpoint