permission control #89
Description
Currently, the guest doesn't has permission to play video but they can play or do some other things to the youtube player. Frontend emits an event and API's middleware stops it.
This flow will tire the server unnecessarily, so if the user does not have permission, request from the interface should be prevented.