added permission check for all child types

I had the problem, that the user could see all child types, even if he don't had the permission to add or change them. This pull request fixes this problem.