Implemented abort when accessing a resource without rights

 * implemented TODO abort(403)
 * checked that all read permissions for resource are role based

Signed-off-by: Bernard `Guyzmo` Pratz <guyzmo+github@m0g.net>