[fix #103] Check permission for paper settings

Only authors and reviewers should be allowed to see the paper settings
and roles.

This will be refined later when using the fine-grained permission
framework.
Merge pull request #104 from satabin/fix/103/check-roles

[fix #103] Check permission for paper settings