         selector = groups: { $elemMatch: id: group.getId() }
         @fetchAccountVmsBySelector delegate, selector, options, callback
 
-  @fetchVms = permit 'list all vms',
-    success: (client, options, callback) ->
+  @fetchVms = secure (client, options, callback) ->
       {delegate} = client.connection
       @fetchAccountVmsBySelector delegate, {}, options, callback
 


  # Public(shared) static method to fetch domains
  # which points to given hostnameAlias
  @fetchDomains$ = permit 'list all vms',
    success:(client, hostnameAlias, callback)->
      {delegate} = client.connection

      delegate.fetchUser (err, user) ->

      'sudoer'          : []
      'create vms'      : ['member','moderator']
      'delete vms'      : ['member','moderator']
    sharedMethods       :
      static            : [
                           'fetchVms','fetchVmsByContext', 'fetchVMInfo'
