Role based permissions

Fixes #5