return 403 unauthorized when the user does not have the
correct role for getting, adding and deleting record from db

Change-Id: I5d7126a446176f053398c2040ef7b03f3050b1d7