Look at introducing permissions

Need to define the actual permissions types.

Possibly a simple start point would be to have the following:

- admin - can view/create/edit everything
- viewer - view only user
- not sure yet of any other levels