#75 Add some permissions
#75 Add permission checking to security interceptor