Add role restrictions in ListController
Currently anyone can browse collections and get their status information. We should mimic the webapp's roles for how viewing collections is handled.
Currently anyone can browse collections and get their status information. We should mimic the webapp's roles for how viewing collections is handled.