[fix #103] Check permission for paper settings

Only authors and reviewers should be allowed to see the paper settings
and roles.

This will be refined later when using the fine-grained permission
framework.