Api auth

Initial changes in the permissions for different resource fields. Need to write tests !