de4553f25a
* added permission check for secrets * typo in subresource * moved auth check to the command receiver
* added permission check for secrets * typo in subresource * moved auth check to the command receiver