implemented permissions and student/resource relations; updated views accordingly