Added permission checks for <BIN> into BINController and into main view plxmain.ejs