Browse module, deny access

Response is 403 when user tries to access inaccessible data
Edit module, pass request

Edit module passes request to all newly created and edited objects