Allow editor role to modify focus state
This also changes the status code for requests with insufficient permissions from 401 to 403.
Fixes: #213 (closed)
This also changes the status code for requests with insufficient permissions from 401 to 403.
Fixes: #213 (closed)