Add server side role checks to products

Issue #14