1.  
[security] Add permission check on status detail. #149 
2.
Add friendly error meessage to permission issue case. e.g.
Redirect url from notification email to login page #124