need permission for backend

[emirhanyagci]

i protect routes bud add protect for backend side to.

• [ ] case 1:employe can't delete notes
• [ ] case 2:employe can't edit/delete any employe, admin or manager
• [ ] case 3:manager can't edit/delete admin
• [x] case 4:employee can't create a user
• [x] case 5:employess can fetch only own notes
• [x] case 6:employees can onlu fetch self user infos

[emirhanyagci]

case 4 : dde3648 case 5: 232b4a2 case 6: d9edff8