back-end permissions fixed
Merge pull request #28 from shiftplanning/permissioins

back-end permissions fixed