with spring security sprind data rest for cinemabooking, different roles for different access level ...