Books JSON parsing

+ permission checks where necessary