[FIX] security access rights
Merge pull request #4 from uynil/fix_product_bundle_access

[FIX] security access rights