:lock: increased the granularity of the access control checks for most of the API routes