Added backend checks for article permissions

Added permission checks to the controller. The user gets a permission_denied message, whenever he tries to do an action that is not permitted to him.