* No detailed permissions due to django constraints on model-based permissions * instead: logic controlled permission by group membership * adds translations