Some remaining permission implementation:

• criterion based permission impl
• use of criterion based permission checking in
  • find operations
  • other operations needs to do a negative criterion to check access (like delete)
• better support for content create (Support passing create struct to Limitations?)
• See @todo's