Review Schema API Guards for fine grain permissions

# What is currently missing?

Not All Api Guards have been implemented to support fine grain permissions with the UI checking the permissions instead to prevent users from having access to certain views instead.

# How could this be improved?

The API Guards which check fine grain permissions need to be reviewed and where the permissions checks are missing they need to be added

This story only covers the schema apis.

# Is this a feature you would work on yourself?

- [ ] I plan to open a pull request for this feature