Add access control for relation updates and deletes
Towards specs for access control
Add Specs for Access Control settings in ApiController
Remove unneeded format
Don't use an index route
Merge pull request #180 from edpaget/access-control-for-update-and-delete

Add access control for relation updates and deletes