DataStore2: each CRUD action calls enforce_permission (parent)

CRUD actions are now protected by the configured 'require_role' just
like the main content/view