mapping of permission hierarchy
small bugfixes and refactoring
redirect to relogin
resource permissions controller