[#7] added check for permissions in products controller