Restrict actions to user roles.

[RaphaelJenni]

Add form validations for all the forms and provide some error messages.
Also restrict the actions to the user roles.

[alleycat58uk]

This is 2 separate issues so will move the form validation to a new enhancement issue and leave the user role restriction to this bug issue.