* Use HasPermission in endpoints * Update changelog
* Introduce HasPermission annotation * Update changelog