diff --git a/README.md b/README.md
index 1434391..8f86500 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ Check [Harena Docs Repository](https://github.com/datasci4health/harena-docs/tre
 
 ## Available Services
 
-Check https://documenter.getpostman.com/view/7243662/T1Ds8ag7?version=latest to discover available endpoints provided by `harena manager api`.
+Check https://documenter.getpostman.com/view/12184223/TzK2ZE4d to discover available endpoints provided by `harena manager api`.
 
 ## Getting Started
 
@@ -57,7 +57,7 @@ docker exec -it harena-manager_harena-manager_1 bash
 * `development`:
     * The latest code contaning the most recent updates made by the development team
     * [Changelog file](https://github.com/datasci4health/harena-manager/blob/development/CHANGELOG.md) show unreleased features which will be merged into `master` from `development` branch in the next release
-    * Version running at http://harena.ds4h.org/development . 
+    * Version running at http://harena.ds4h.org/development .
     * Protected. Must use _pull request_ to merge new features.
 <!--* `feature/< github-issue >`:
     * new feature registered on the issue list https://github.com/datasci4health/harena-manager/issues.
diff --git a/harena-manager_-_development.postman_environment.json b/harena-manager_-_development.postman_environment.json
new file mode 100644
index 0000000..a614023
--- /dev/null
+++ b/harena-manager_-_development.postman_environment.json
@@ -0,0 +1,54 @@
+{
+	"id": "617515a5-839f-4878-88b7-b1817eea3e40",
+	"name": "harena-manager - development",
+	"values": [
+		{
+			"key": "protocol",
+			"value": "https://",
+			"enabled": true
+		},
+		{
+			"key": "host",
+			"value": "dev.jacinto.harena.org",
+			"enabled": true
+		},
+		{
+			"key": "port",
+			"value": "10020",
+			"enabled": true
+		},
+		{
+			"key": "api-version",
+			"value": "v1",
+			"enabled": true
+		},
+		{
+			"key": "api-base-url",
+			"value": "{{protocol}}{{host}}/manager/api/{{api-version}}",
+			"enabled": true
+		},
+		{
+			"key": "user-refreshToken",
+			"value": null,
+			"enabled": true
+		},
+		{
+			"key": "user-token",
+			"value": null,
+			"enabled": true
+		},
+		{
+			"key": "user-id",
+			"value": "",
+			"enabled": true
+		},
+		{
+			"key": "quest-id",
+			"value": "pocus-training",
+			"enabled": true
+		}
+	],
+	"_postman_variable_scope": "environment",
+	"_postman_exported_at": "2021-04-29T13:04:52.910Z",
+	"_postman_exported_using": "Postman/7.36.5"
+}
\ No newline at end of file
diff --git a/harena-manager_-_localhost.postman_environment.json b/harena-manager_-_localhost.postman_environment.json
new file mode 100644
index 0000000..76d3597
--- /dev/null
+++ b/harena-manager_-_localhost.postman_environment.json
@@ -0,0 +1,59 @@
+{
+	"id": "a6d93a0e-9287-4c6f-a1b8-c99bb42ea6e6",
+	"name": "harena-manager - localhost",
+	"values": [
+		{
+			"key": "protocol",
+			"value": "http://",
+			"enabled": true
+		},
+		{
+			"key": "host",
+			"value": "localhost",
+			"enabled": true
+		},
+		{
+			"key": "port",
+			"value": "10020",
+			"enabled": true
+		},
+		{
+			"key": "api-version",
+			"value": "v1",
+			"enabled": true
+		},
+		{
+			"key": "api-base-url",
+			"value": "{{protocol}}{{host}}:{{port}}/api/{{api-version}}",
+			"enabled": true
+		},
+		{
+			"key": "user-refreshToken",
+			"value": "",
+			"enabled": true
+		},
+		{
+			"key": "user-token",
+			"value": "",
+			"enabled": true
+		},
+		{
+			"key": "quest-id",
+			"value": "",
+			"enabled": true
+		},
+		{
+			"key": "user-id",
+			"value": "",
+			"enabled": true
+		},
+		{
+			"key": "case-id",
+			"value": "",
+			"enabled": true
+		}
+	],
+	"_postman_variable_scope": "environment",
+	"_postman_exported_at": "2021-04-29T13:04:41.153Z",
+	"_postman_exported_using": "Postman/7.36.5"
+}
\ No newline at end of file
diff --git a/harena-manager_-_production.postman_environment.json b/harena-manager_-_production.postman_environment.json
index 8e8b984..5e1cd2f 100644
--- a/harena-manager_-_production.postman_environment.json
+++ b/harena-manager_-_production.postman_environment.json
@@ -9,7 +9,7 @@
 		},
 		{
 			"key": "host",
-			"value": "harena.ds4h.org",
+			"value": "jacinto.harena.org",
 			"enabled": true
 		},
 		{
@@ -28,57 +28,17 @@
 			"enabled": true
 		},
 		{
-			"key": "user-id",
-			"value": 130,
-			"enabled": true
-		},
-		{
-			"key": "user-email",
-			"value": "jacinto@email.com",
-			"enabled": true
-		},
-		{
-			"key": "user-username",
-			"value": "jacinto",
-			"enabled": true
-		},
-		{
-			"key": "user-password",
-			"value": "jacinto",
+			"key": "user-refreshToken",
+			"value": null,
 			"enabled": true
 		},
 		{
 			"key": "user-token",
-			"value": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1aWQiOjEsImlhdCI6MTU4Mzk2ODUzMn0.FWwj3i0VFKOJakMM_1Oo6Ads0gkMYYjcmcqkE4UjbrA",
+			"value": null,
 			"enabled": true
 		},
 		{
-			"key": "case-uuid",
-			"value": "d5d804b0-1876-4430-a5bf-42b442eeb26a",
-			"enabled": true
-		},
-		{
-			"key": "case-name",
-			"value": "case001-development",
-			"enabled": true
-		},
-		{
-			"key": "case-source",
-			"value": "Start\n=====\n\n## Case 001 (start,dialog_left)\n:NURSE Agnes: Doctor, we have a man (51 years old) who entered the emergency department reporting chest pain. His vital signs are ABP: 144x92mmHG; HR: 78bpm; RR: 21rpm; Temp: 37oC; O2Sat: 98%.\n\n* Let us go! -> Cycle 1.Begin\n\nCycle 1\n=======\n\nBegin (information)\n-------------------\n\n:PATIENT Jakob: Doctor, I am feeling chest pain since yesterday. The pain is continuous and is located just in the middle of my chest, worsening when I breathe and when I lay down on my bed. I suffer from arterial hypertension and smoke 20 cigarettes every day. My father had a “heart attack” at my age and I am very worried about it.\n\n<b>PHYSICAL EXAMINATION</b> <br> The cardiac and pulmonary auscultation are normal; chest pain does not worse with palpation of the thorax; there is no jugular stasis nor lower limb edema.\n\n:Jacinto:What do you want to do?\n\n* -> Generate hypothesis\n* -> More information\n* Call the supervisor -> Call the supervisor.A\n\nGenerate hypothesis (input)\n---------------------------\nWhat is your main diagnostic hypothesis?\n:PATIENT Jakob:.\n{?1 hypothesis:mesh#pericarditis,myopericarditis,pericardial inflammation,pericardial infection,pericardial effusion;infarction,myocardial infarction,coronary syndrome,acute coronary syndrome,ischemia,myocardial ischemia,coronary insufficiency,angina,angina pectoris}\n\n* Submit hypothesis -> Check hypothesis\n\nMore information (information)\n------------------------------\n\n<b>MORE INFORMATION</b> <br> The patient never felt chest pain before. He exercises regularly and has lost weight in the last three months. He takes amlodipine and losartan regularly. Two weeks ago, he had an auto-limited gastroenteritis episode. He denies recent travels and surgery.\n:PATIENT Jakob:.\n\n:Jacinto:What do you want to do?\n\n* Back to the case -> Cycle 1.Begin\n\nCall the supervisor\n-------------------\n\n### A (detailed)\n:SUPERVISOR Harry:\nHi! I am glad that you called me. Chest pain is an important complaint at the emergency department and we have to exclude the fatal causes: myocardial infarction (MI), acute aortic dissection (AAD), pulmonary embolism PE), hypertensive pneumothorax (HP), and Boerhaave Syndrome (BS).\n\nThe best way to find out what is happening with your patient, my young padawan, is to gather as much information as possible through history taking and physical examination. We need to search for the signs and symptoms that can guide our clinical reasoning process by changing the pre-test probabilities of each disease.\n::\n\n* See likelihood tables -> B \n\n### B (detailed)\n:SUPERVISOR Harry:.\n**Likelihood Tables**\n\nDo you know the concept of Likelihood ratio (LR)? -> Likelihood Ratio\n\n+ -> Clinical History Myocardial Infarction\n\n+ -> Physical Examination Myocardial Infarction\n\n+ -> Clinical History Aortic Dissection\n\n+ -> Physical Examination Aortic Dissection\n\n+ -> Pulmonary Embolism Wells Criteria\n\n* Continue talking -> C \n\n### C (detailed)\n:SUPERVISOR Harry:.\nHypertensive pneumothorax is more common in tall and thin young adults (primary pneumothorax) or in patients with chronic pulmonary diseases or chest trauma (secondary pneumothorax). On physical examination, we expect asymmetry in lung auscultation and the trachea may be dislocated to the contralateral side of the pneumothorax.\n\nBoerhaave Syndrome is more common in patients who presented vomiting before the chest pain started, were submitted to endoscopic procedures or had chest trauma.\n\nHow does this information can help you to solve your case?\n\n* Back to the case -> Cycle 1.Begin\n\n### Likelihood Ratio (note)\n\nLikelihood ratio (LR) - like sensitivity and specificity, LR describe the discriminatory power of features in a clinical context, estimating the probability of disease. When the LR is higher than 1, the feature increases the probability; when lower than 1, reduces it.\n\n* Back -> Supervisor B\n\n### Clinical History Myocardial Infarction (note)\n![Clinical History Myocardial Infarction](images/ebm-clinical-history-myocardial-infarction.png)\n\n* Back -> Supervisor B\n\n### Physical Examination Myocardial Infarction (note)\n![Physical Examination Myocardial Infarction](images/ebm-physical-examination-myocardial-infarction.png)\n\n* Back -> Supervisor B\n\n### Clinical History Aortic Dissection (note)\n![Clinical History Aortic Dissection](images/ebm-clinical-history-aortic-dissection.png)\n\n* Back -> Supervisor B\n\n### Physical Examination Aortic Dissection (note)\n![Physical Examination Aortic Dissection](images/ebm-physical-examination-aortic-dissection.png)\n\n* Back -> Call the supervisor B\n\n### Pulmonary Embolism Wells Criteria (note)\n![Pulmonary Embolism Wells Criteria](images/ebm-pulmonary-embolism-wells-criteria.png)\n\n* Back -> Call the supervisor B\n\nCheck hypothesis (selector)\n---------------------------\n\n:Jacinto:Let us check out your hypothesis. Highlight in green the findings that corroborate your hypothesis; in blue those that are neutral; and in red the ones speaking against your hypothesis.\n\n{{symptoms#contribution to diagnostics: ,+,=,-\nNurse: Doctor, please you have to evaluate a {man(male)} ({51 years-old(aging=51)#=}) who entered the emergency department reporting {chest pain#=}.His vital signs are {ABP: 144x92mmHG#=}; {HR: 78bpm#=}; {RR: 21rpm#=}; {Temp: 37oC#=}; {O2Sat: 98%#=}.\n\nPatient: Doctor, I am feeling chest pain since yesterday. The {pain is continuous#=} and {is located just in the middle of my chest#=}, {worsening when I breathe#+} and {when I lay down on my bed#+}. I have {arterial hypertension#-} and {I smoke 20 cigarettes(smoking=20/day)#-} every day. {My father had a \"heart attack\"#-} at my age and I am very worried about it.\n\nYou perform physical examination: {cardiac and pulmonary auscultation are normal#-}; {chest pain does not worse with palpation of the thorax#=}; {there is no jugular stasis#=} {nor lower limb edema#=}.\n}}\n\n* Submit -> Review hypothesis \n\nReview hypothesis (input)\n-------------------------\nIf you whant to review your hypothesis, type below the new hypothesis.\n:PATIENT Jakob:.\n{?1 hypothesis:mesh#pericarditis,myopericarditis,pericardial inflammation,pericardial infection,pericardial effusion;infarction,myocardial infarction,coronary syndrome,acute coronary syndrome,ischemia,myocardial ischemia,coronary insufficiency,angina,angina pectoris}\n\n* Submit -> Cycle 2.Order EKG\n\nCycle 2\n=======\n\n## Order EKG (decision_exam)\nOur patient denies any recent long trip, immobilization or surgery.\n\nThe blood pressure is symmetric in the four limbs. \n\n:EKG:.\n\n* Magnify -> Magnify EKG\n\n:Game: What do you want to do?\n* -> Generate hypothesis\n* -> More information\n* -> Call the supervisor\n\n\n## Magnify EKG (note,magnify_exam)\n\n:EKG:.\n\n* Return -> Order EKG\n\n## Generate hypothesis (input)\nWhat is your main diagnostic hypothesis?\n:PATIENT Jakob:.\n{?1 hypothesis:mesh#pericarditis,myopericarditis,pericardial inflammation,pericardial infection,pericardial effusion;infarction,myocardial infarction,coronary syndrome,acute coronary syndrome,ischemia,myocardial ischemia,coronary insufficiency,angina,angina pectoris}\n\n* Submit hypothesis -> Check hypothesis\n\n## More information (decision_exam)\n\n![EKG Description](images/ekg-description.png)\n\n* EKG Analysis\n\n:EKG:.\n\n:Game: What do you want to do?\n* Back -> Order EKG\n* Analyze EKG -> EKG Analysis\n\n## EKG Analysis (note,marker_exam)\n\n<dcc-group-marker context=\"ekg\" image=\"images/ekg.png\">\n   <dcc-image-marker id=\"DI\" label=\"DI\" coords=\"238,127,164,76\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"DII\" label=\"DII\" coords=\"231,328,148,273\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"DIII\" label=\"DIII\" href=\"\" coords=\"67,484,148,528\" image=\"images/ekg-detail-02.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"aVL\" label=\"aVL\" coords=\"413,286,515,332\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"IV\" label=\"IV\" coords=\"1005,40,1123,130\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"V\" label=\"V\" coords=\"1004,248,1133,323\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"VI\" label=\"VI\" coords=\"1010,460,1130,538\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n</dcc-group-marker>\n\n* Return -> Order EKG\n\n## Call the supervisor (decision_exam)\n\nWe did not find features that increase the likelihood of myocardial ischemia. Moreover, our patient has a pleuritic chest pain that gets worse when the patient lays down.\n\nIn the EKG we found ST-segment elevation in almost all leads. Also, we found a depression of the PR segment in the DII lead.\n\n* -> EKG Analysis\n\n:EKG:.\n\n:Game: What do you want to do?\n* Back -> Order EKG\n* Analyze EKG -> EKG Analysis\n\n## Check hypothesis (marker_exam)\n\n<dcc-group-marker context=\"ekg\" image=\"images/ekg.png\">\n   <dcc-image-marker id=\"DI\" label=\"DI\" coords=\"238,127,164,76\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"DII\" label=\"DII\" coords=\"231,328,148,273\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"DIII\" label=\"DIII\" href=\"\" coords=\"67,484,148,528\" image=\"images/ekg-detail-02.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"aVL\" label=\"aVL\" coords=\"413,286,515,332\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"IV\" label=\"IV\" coords=\"1005,40,1123,130\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"V\" label=\"V\" coords=\"1004,248,1133,323\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n   <dcc-image-marker id=\"VI\" label=\"VI\" coords=\"1010,460,1130,538\" image=\"images/ekg-detail-01.png\"></dcc-image-marker>\n</dcc-group-marker>\n\n* Submit -> Review hypothesis\n\n## Review hypothesis (input)\nIf you whant to review your hypothesis, type below the new hypothesis.\n:PATIENT Jakob:.\n{?1 hypothesis:mesh#pericarditis,myopericarditis,pericardial inflammation,pericardial infection,pericardial effusion;infarction,myocardial infarction,coronary syndrome,acute coronary syndrome,ischemia,myocardial ischemia,coronary insufficiency,angina,angina pectoris}\n\n* Submit -> Final.Report\n\nFinal\n=====\n\nReport (detailed)\n-----------------\n\nCongratulations, my young Dr. you could helped your patient providing his diagnosis. Now, Let's review all levels of this case.\n\n:Computer:Select a final report level:\n\n* -> Level 1\n* -> Level 2.2a\n* -> Level 3.3a\n\nLevel 1 (detailed)\n------------------\n\n<b>Level 1</b>: your answer was <dcc-expression expression=\"Cycle_1.Generate_hypothesis.hypothesis\"></dcc-expression>.\n\nOur patient complained about chest pain, located in the middle of his chest, worsening when he breaths and when he lay down on his bed. Both features increases the probability of pericardial disease, especially acute pericarditis. Although patient´s father died of a \"heart attack\", there were no chest pain features that increase the probability of myocardial infarction, as the pain did not irradiate to arms, the pain was not described as a pressure, neither complaining about nausea, vomiting or shortness of breath. Another differential diagnosis to consider is myopericarditis, but we not be able to find heart failure signs (pulmonary and cardiac auscultation were normal) and the patient did not complain about dyspnea. So, at the level 1, the answer to our open-ended question was Acute Pericarditis.\n\n* Next -> Level 2.2a\n* Return -> Report\n\nLevel 2\n-------\n\n### 2a (detailed)\n\n<div style=\"font-size: 14px\">\n<b>Level 2</b>: At this level, we asked you to highlight in green all features that corroborate your hypothesis, in blue those are neutral and in red the ones speaking against your hypothesis.\n<br><br>\n<b>Your answer:</b>\n<br>\n{{player#Cycle_1.Check_hypothesis.symptoms: ,+,=,-\nNurse: Doctor, please you have to evaluate a {man(male)} ({51 years-old(aging=51)#=}) who entered the emergency department reporting {chest pain#=}.His vital signs are {ABP: 144x92mmHG#=}; {HR: 78bpm#=}; {RR: 21rpm#=}; {Temp: 37oC#=}; {O2Sat: 98%#=}.\n<br>\nPatient: Doctor, I am feeling chest pain since yesterday. The {pain is continuous#=} and {is located just in the middle of my chest#=}, {worsening when I breathe#+} and {when I lay down on my bed#+}. I have {arterial hypertension#-} and {I smoke 20 cigarettes(smoking=20/day)#-} every day. {My father had a \"heart attack\"#-} at my age and I am very worried about it.\n<br>\nYou perform physical examination: {cardiac and pulmonary auscultation are normal#-}; {chest pain does not worse with palpation of the thorax#=}; {there is no jugular stasis#=} {nor lower limb edema#=}.\n}}\n<br><br>\n<b>Our answer:</b> \n<br>\n{{answers#answers: ,+,=,-\nNurse: Doctor, please you have to evaluate a {man(male)} ({51 years-old(aging=51)#=}) who entered the emergency department reporting {chest pain#=}.His vital signs are {ABP: 144x92mmHG#=}; {HR: 78bpm#=}; {RR: 21rpm#=}; {Temp: 37oC#=}; {O2Sat: 98%#=}.\n<br>\nPatient: Doctor, I am feeling chest pain since yesterday. The {pain is continuous#=} and {is located just in the middle of my chest#=}, {worsening when I breathe#+} and {when I lay down on my bed#+}. I have {arterial hypertension#-} and {I smoke 20 cigarettes(smoking=20/day)#-} every day. {My father had a \"heart attack\"#-} at my age and I am very worried about it.\n<br>\nYou perform physical examination: {cardiac and pulmonary auscultation are normal#-}; {chest pain does not worse with palpation of the thorax#=}; {there is no jugular stasis#=} {nor lower limb edema#=}.\n}}\n</div>\n\n* Next -> 2b\n* Return -> Final.Report\n\n### 2b (detailed)\n\nAfter checking the hypothesis you reviewed your answer to: <dcc-expression expression=\"Cycle_1.Review_hypothesis.hypothesis\"></dcc-expression>.\n\nIn acute pericarditis, patients are usually young, most cases are reported under 50 years old, but it can be diagnosed at any age. There is no vital signs features that increase the probability of this condition. Some patients may present fever and tachycardia, but it´s not common signs. So, when vital signs are normal, we cannot confirm or exclude this diagnosis.\n\nIn clinical history, two features increase the probability of the chest pain being related to a pericardial disease: worsening with breathing; and worsening when the patient lay down. \n\n* Next -> 2c\n* Return -> Final.Report\n\n### 2c (detailed)\n\nAs the patient has arterial hypertension, is smoker and his father died of a \"heart attack\" we could consider myocardial infarction as one of the diagnosis. But considering chest pain features of our patient, there is no one that increases this possibility. So, these features may lead us to cognitive error if we consider myocardial infarction as the main diagnosis (which is wrong). \n\nIn physical examination in patients with acute pericarditis, we may find pericardial rub, one of the diagnostic criteria. So, when we did not find it, the probability of the disease is reduced, but did not exclude the diagnosis. It is crucial to look for the other diagnostic criteria.\n\n* Next -> Level 3.3a\n* Return -> Final.Report\n\nLevel 3\n-------\n\n### 3a (detailed)\n\nMy young Dr, the EKG interpretation was very helpful to solve our case.\n\nWe found a diffuse ST-segment elevation, and a PR-segment depression in DII lead.  These findings, associated to the clinical scenario, strongly indicate the main hypothesis of Acute Pericarditis.\n\n* Next -> 3b\n* Return -> Final.Report\n\n### 3b (detailed)\n\nMy young Dr, the EKG interpretation was very helpful to solve our case.\n\nWe found a diffuse ST-segment elevation, and a PR-segment depression in DII lead.  These findings, associated to the clinical scenario, strongly indicate the main hypothesis of Acute Pericarditis.\n\n* Next -> 3c\n* Return -> Final.Report\n\n### 3c (detailed)\n<div style=\"font-size: 18px\">\nIn the following table, we provide the diagnostic criteria for acute pericaditis and myopericarditis:\n\n![Clinical History Myocardial Infarction](images/ebm-pericarditis.png)\n\nCooper LT, Imazio M. Management of myopericarditis. Expert Rev Cardiovasc Ther 2013; 11(2): 193-201.\n\nOur patient fullfill the following criteria: 1 and 3. So, acute pericarditis is the main diagnostic hypothesis.\n</div>\n\n* Return -> Final.Report  \n",
-			"enabled": true
-		},
-		{
-			"key": "filterBy-user",
-			"value": "user",
-			"enabled": true
-		},
-		{
-			"key": "case-id",
-			"value": "",
-			"enabled": true
-		},
-		{
-			"key": "user-refreshToken",
+			"key": "user-id",
 			"value": "",
 			"enabled": true
 		},
@@ -89,6 +49,6 @@
 		}
 	],
 	"_postman_variable_scope": "environment",
-	"_postman_exported_at": "2020-10-25T22:36:50.123Z",
-	"_postman_exported_using": "Postman/7.34.0"
+	"_postman_exported_at": "2021-04-29T13:03:35.050Z",
+	"_postman_exported_using": "Postman/7.36.5"
 }
\ No newline at end of file
diff --git a/src/adonisjs/app/Middleware/CheckCasePermission.js b/src/adonisjs/app/Middleware/CheckCasePermission.js
index 5b670a8..ea38ea0 100644
--- a/src/adonisjs/app/Middleware/CheckCasePermission.js
+++ b/src/adonisjs/app/Middleware/CheckCasePermission.js
@@ -27,40 +27,88 @@ class CheckPermissionForGivenCase {
 
       if (properties[0] == 'read') {
         queryResult = await Database
-          .from('cases')
-          .leftJoin('permissions', 'cases.id', 'permissions.table_id')
-          .join('users', 'users.id', 'cases.author_id')
+        .from('cases')
+        .leftJoin('permissions', 'cases.id', 'permissions.table_id')
+        .leftJoin('users_groups', function() {
+          this.on('permissions.subject', '=', 'users_groups.group_id')
+          .andOn('users_groups.user_id', '=', Database.raw('?', [auth.user.id]));
+        })
+        .join('users', 'cases.author_id','users.id')
+        .join('institutions', 'users.institution_id', 'institutions.id')
+        .where(function(){
+          this
           .where('cases.author_id', auth.user.id)
           .orWhere(function () {
             this
-              .where('permissions.entity', 'institution')
-              .where('permissions.subject', auth.user.institution_id)
-              .where('permissions.clearance', '>=', 1)
+            .where(function(){
+              this
               .where(function(){
                 this
-                .whereNull('permissions.subject_grade')
-                .orWhere('permissions.subject_grade', auth.user.grade)
+                .where('permissions.entity', 'institution')
+                .where('permissions.subject', auth.user.institution_id)
+              })
+              .orWhere(function(){
+                this
+                .where('permissions.entity', 'user')
+                .where('permissions.subject', auth.user.id)
               })
+              .orWhere(function() {
+                this
+                .where('permissions.entity', 'group')
+                .where('users_groups.user_id', auth.user.id)
+              })
+            })
+            .where('permissions.clearance', '>=', '1')
+            .where(function(){
+              this
+              .whereNull('permissions.subject_grade')
+              .orWhere('permissions.subject_grade', auth.user.grade)
+            })
           })
-          .count()
+        })
+        .count()
       }
 
       if (properties[0] == 'share') {
         queryResult = await Database
         .from('cases')
         .leftJoin('permissions', 'cases.id', 'permissions.table_id')
-        .join('users', 'users.id', 'cases.author_id')
-        .where('cases.author_id', auth.user.id)
-        .orWhere(function () {
+        .leftJoin('users_groups', function() {
+          this.on('permissions.subject', '=', 'users_groups.group_id')
+          .andOn('users_groups.user_id', '=', Database.raw('?', [auth.user.id]));
+        })
+        .join('users', 'cases.author_id','users.id')
+        .join('institutions', 'users.institution_id', 'institutions.id')
+        .where(function(){
           this
-            .where('permissions.entity', 'institution')
-            .where('permissions.subject', auth.user.institution_id)
-            .where('permissions.clearance', '>=', 2)
+          .where('cases.author_id', auth.user.id)
+          .orWhere(function () {
+            this
+            .where(function(){
+              this
+              .where(function(){
+                this
+                .where('permissions.entity', 'institution')
+                .where('permissions.subject', auth.user.institution_id)
+              })
+              .orWhere(function(){
+                this
+                .where('permissions.entity', 'user')
+                .where('permissions.subject', auth.user.id)
+              })
+              .orWhere(function() {
+                this
+                .where('permissions.entity', 'group')
+                .where('users_groups.user_id', auth.user.id)
+              })
+            })
+            .where('permissions.clearance', '>=', '3')
             .where(function(){
               this
               .whereNull('permissions.subject_grade')
               .orWhere('permissions.subject_grade', auth.user.grade)
             })
+          })
         })
         .count()
       }
@@ -69,18 +117,42 @@ class CheckPermissionForGivenCase {
         queryResult = await Database
         .from('cases')
         .leftJoin('permissions', 'cases.id', 'permissions.table_id')
-        .join('users', 'users.id', 'cases.author_id')
-        .where('cases.author_id', auth.user.id)
-        .orWhere(function () {
+        .leftJoin('users_groups', function() {
+          this.on('permissions.subject', '=', 'users_groups.group_id')
+          .andOn('users_groups.user_id', '=', Database.raw('?', [auth.user.id]));
+        })
+        .join('users', 'cases.author_id','users.id')
+        .join('institutions', 'users.institution_id', 'institutions.id')
+        .where(function(){
           this
-            .where('permissions.entity', 'institution')
-            .where('permissions.subject', auth.user.institution_id)
-            .where('permissions.clearance', '>=', 4)
+          .where('cases.author_id', auth.user.id)
+          .orWhere(function () {
+            this
+            .where(function(){
+              this
+              .where(function(){
+                this
+                .where('permissions.entity', 'institution')
+                .where('permissions.subject', auth.user.institution_id)
+              })
+              .orWhere(function(){
+                this
+                .where('permissions.entity', 'user')
+                .where('permissions.subject', auth.user.id)
+              })
+              .orWhere(function() {
+                this
+                .where('permissions.entity', 'group')
+                .where('users_groups.user_id', auth.user.id)
+              })
+            })
+            .where('permissions.clearance', '>=', '4')
             .where(function(){
               this
               .whereNull('permissions.subject_grade')
               .orWhere('permissions.subject_grade', auth.user.grade)
             })
+          })
         })
         .count()
       }
@@ -92,7 +164,8 @@ class CheckPermissionForGivenCase {
           .where('cases.author_id', auth.user.id)
           .count()
       }
-
+      console.log('========================================')
+      console.log(queryResult[0]['count(*)'])
       if (queryResult[0]['count(*)'] === 0) {
         return response.status(500).json('you dont have permission to ' + properties[0] + ' such case')
       } else {