Fixes #3. RBAC on bar creation only. ACL still needed for edition.