Fix backend endpoints

[Witts-A]

Fix endpoints to check if user is admin or not and then call the proper function for that permission