Anyone can add/modify/delete links (even if it isn't logged in)

Until now, anyone can add/modify/delete links (even if it isn't logged in). Adding the filter require_login solves that part. But one should go even further as besides being logged in, special permissions should be in place: only admin can add/modify/delete links or a new set of permissions should be created for that purpose (add/modify/delete).