Update permissions in each route

[kevinrawal]

Analyze and map each permission to the appropriate routes. Currently, some permissions allow users to modify the vector DB when they should not have access. Also, add documentation about permissions.