Add permission check to /utility/sort

/utility/sort has no permission check. So any registered user can write directly to column Sort in any table that contains such a column (Category, RoleID, Message)