Implemented a preliminary Role-Based Access Control for the Dashboard.

In this version, there are two predefined roles:
- superuser

  This role could access all resources.
- viewer

  This role can only view resources and data, corresponding to all GET requests in the REST API.