Merge pull request #301 from dmcassel/dev

#300 adding REST-role permissions to normal code