api decorator to check than current user have permission to use
specific api