Add access controls

[qf0]

The ability to have access controls would be great for zero trust. Having users only being able to access templates, and reports they need to will reduce risk.