Restrict access to data for different type of users

[varunity]

API endpoints should have field level permissions so that specific fields will only be available to specific user roles/groups with a higher level of access granted.