Add / Edit / Delete -> Resource

Yan:

api.Thumbnail.uploadThumbnail  ->    Permission.CreatePreview

api.Thumbnail.removeThumbnail  ->    Permission.DeletePreview??? There is no permission check for ResourceRef.thumbnail