remove duplicated access checking code

[laser-shark]

The access checks when calling different routes could be condensed and extracted into methods, e.g. checkAdminAccess()

[ColdIV]

Probably better to also allow different kinds of access like moderation for example.