gave permissions for some actions, so they are only accessible if logged in