Feature/user level restrictions

Can add very basic role-based permissions.