Some work on permissions

* Hide options, buttons, etc. if the user has no access
* Add further users in the tests