Fix access rights.
Add access control on various actions.