Refactor AH controller
Prohibit past editing
Add Permission object
Add permissions