RBAC implementation + Asset filepermissions update