diff --git a/scilog/src/app/logbook/core/snippet/snippet.component.html b/scilog/src/app/logbook/core/snippet/snippet.component.html
index d0c3f27a..4109e959 100644
--- a/scilog/src/app/logbook/core/snippet/snippet.component.html
+++ b/scilog/src/app/logbook/core/snippet/snippet.component.html
@@ -16,11 +16,11 @@
         <mat-icon>info</mat-icon>
         <span>Info</span>
       </button>
-      <button mat-menu-item (click)="editSnippet()" [disabled]="!enableEdit? 'disabled' : null" *ngIf="showEditButtons">
+      <button mat-menu-item (click)="editSnippet()" [disabled]="!enableEdit.update" *ngIf="showEditButtons" matTooltip="{{ isActionAllowed.tooltips.update }}">
         <mat-icon>edit</mat-icon>
         <span>Edit</span>
       </button>
-      <button mat-menu-item (click)="setDashboardName()" [disabled]="!enableEdit? 'disabled' : null">
+      <button mat-menu-item (click)="setDashboardName()" [disabled]="!enableEdit.update" matTooltip="{{ isActionAllowed.tooltips.update }}">
         <mat-icon>assistant</mat-icon>
         <span>Dashboard name</span>
       </button>
@@ -33,7 +33,7 @@
         <span>Reply</span>
       </button>
       <!-- <button mat-menu-item disabled> -->
-      <button mat-menu-item (click)="deleteSnippet()" [disabled]="!enableEdit? 'disabled' : null"
+      <button mat-menu-item (click)="deleteSnippet()" [disabled]="!enableEdit.delete" matTooltip="{{ isActionAllowed.tooltips.delete }}"
         *ngIf="showEditButtons">
         <mat-icon>delete</mat-icon>
         <span>Delete</span>
diff --git a/scilog/src/app/logbook/core/snippet/snippet.component.spec.ts b/scilog/src/app/logbook/core/snippet/snippet.component.spec.ts
index ba0163c7..49ea8884 100644
--- a/scilog/src/app/logbook/core/snippet/snippet.component.spec.ts
+++ b/scilog/src/app/logbook/core/snippet/snippet.component.spec.ts
@@ -9,7 +9,6 @@ import { UserPreferencesService } from '@shared/user-preferences.service';
 import { BrowserAnimationsModule } from '@angular/platform-browser/animations';
 import { WidgetItemConfig } from '@model/config';
 
-
 describe('SnippetComponent', () => {
   let component: SnippetComponent;
   let fixture: ComponentFixture<SnippetComponent>;
@@ -215,27 +214,29 @@ describe('SnippetComponent', () => {
   }));
 
   it('should release the lock', async () => {
-    spyOn(component, 'allowEdit').and.returnValue(true);
-    component._enableEdit = false;
+    component._enableEdit = {update: false, delete: false};
     component.snippetIsAccessedByAnotherUser = true;
+    spyOn(component['isActionAllowed'], 'canUpdate').and.returnValue(true);
+    spyOn(component['isActionAllowed'], 'canDelete').and.returnValue(true);
+    spyOn(component['isActionAllowed'], 'isNotExpired').and.returnValue(true);
     await component.releaseLock();
-    expect(component.enableEdit).toEqual(true);
+    expect(component.enableEdit).toEqual({update: true, delete: true});
     expect(component.snippetIsAccessedByAnotherUser).toEqual(false);
     expect(component['logbookItemDataService'].deleteAllInProgressEditing)
       .toHaveBeenCalledOnceWith(snippetMock.id);
-  })
+  });
 
   it('should add the lock', () => {
     spyOn(component, 'releaseLock');
     spyOn(window, 'clearTimeout');
     component.snippetIsAccessedByAnotherUser = false;
     component.timerId = 123;
-    component._enableEdit = true;
+    component._enableEdit = {update: true, delete: true};
     component.lockEdit();
-    expect(component.enableEdit).toEqual(false);
+    expect(component.enableEdit).toEqual({update: false, delete: false});
     expect(component.snippetIsAccessedByAnotherUser).toEqual(true);
     expect(window.clearTimeout).toHaveBeenCalledOnceWith(123);
-  })
+  });
 
   it('should set the editing timeout', () => {
     spyOn(window, "setTimeout");
@@ -243,7 +244,7 @@ describe('SnippetComponent', () => {
     component.setEditTimeout(123);
     expect(component.timerId).not.toEqual(null);
     expect(window.setTimeout).toHaveBeenCalledOnceWith(jasmine.any(Function), 123);
-  })
+  });
 
   it('should lock the edit timeout and set by', () => {
     const avatarForUser = "aTestUserForlockEditUntilTimeout";
@@ -253,7 +254,7 @@ describe('SnippetComponent', () => {
     expect(component.avatarHash).toEqual(avatarForUser);
     expect(component.lockEdit).toHaveBeenCalledTimes(1);
     expect(component.setEditTimeout).toHaveBeenCalledTimes(1);
-  })
+  });
 
   it('should set locked', () => {
     spyOn(component, "getLastEditedSnippet").and.returnValue({createdAt: "2023-01-01", updatedBy: "aUser"});
@@ -261,7 +262,7 @@ describe('SnippetComponent', () => {
     spyOn(component, "lockEditUntilTimeout");
     component.setLocked();
     expect(component.lockEditUntilTimeout).toHaveBeenCalledOnceWith("aUser", component._timeoutMilliseconds - 1);
-  })
+  });
 
   it('should release old lock', () => {
     spyOn(component, "getLastEditedSnippet").and.returnValue({createdAt: "2023-01-01", updatedBy: "aUser"});
@@ -269,12 +270,12 @@ describe('SnippetComponent', () => {
     spyOn(component, "releaseLock");
     component.setLocked();
     expect(component.releaseLock).toHaveBeenCalledTimes(1);
-  })
+  });
 
   it('should get undefined from last edited snippet', () => {
     const subs = [{snippetType: 'paragraph'}, {snippetType: 'paragraph'}];
     expect(component.getLastEditedSnippet(subs)).toEqual(undefined);
-  })
+  });
 
   it('should get first toDelete from last edited snippet', () => {
     const subs = [
@@ -282,7 +283,7 @@ describe('SnippetComponent', () => {
       { snippetType: "edit", toDelete: true, id: "2" }
     ];
     expect(component.getLastEditedSnippet(subs)).toEqual(subs[0]);
-  })
+  });
 
   it('should get last snippet from last edited snippet', () => {
     const subs = [
@@ -290,12 +291,26 @@ describe('SnippetComponent', () => {
       {snippetType: "edit", createdAt: "2023-01-01"}, 
     ];
     expect(component.getLastEditedSnippet(subs)).toEqual(subs[0]);
-  })
+  });
 
   it('should call setLocked after subsnippets change', () => {
     spyOn(component, "setLocked");
     component.subsnippets = [{parentId: "123"}];
     expect(component.setLocked).toHaveBeenCalledTimes(1);
+  });
+
+  [
+    {input: {v: true, canUpdate: true}, output: true},
+    {input: {v: true, canUpdate: false}, output: false},
+    {input: {v: false, canUpdate: false}, output: false},
+    {input: {v: false, canUpdate: true}, output: false},
+  ].forEach((t, i) => {
+    it(`should test enableEdit ${i}`, () => {
+      spyOn(component['isActionAllowed'], "canUpdate").and.returnValue(t.input.canUpdate);
+      spyOn(component['isActionAllowed'], "canDelete").and.returnValue(true);
+      component.enableEdit = t.input.v;
+      expect(component._enableEdit.update).toEqual(t.output);
+    })
   })
 
 });
diff --git a/scilog/src/app/logbook/core/snippet/snippet.component.ts b/scilog/src/app/logbook/core/snippet/snippet.component.ts
index c5fb5cd0..e57f1541 100644
--- a/scilog/src/app/logbook/core/snippet/snippet.component.ts
+++ b/scilog/src/app/logbook/core/snippet/snippet.component.ts
@@ -14,6 +14,7 @@ import { trigger, state, style, transition, animate } from '@angular/animations'
 import { WidgetItemConfig } from '@model/config';
 import { Edits } from 'src/app/core/model/edits';
 import { Basesnippets } from 'src/app/core/model/basesnippets';
+import { IsAllowedService } from 'src/app/overview/is-allowed.service';
 
 
 @Component({
@@ -27,7 +28,8 @@ import { Basesnippets } from 'src/app/core/model/basesnippets';
       transition('highlight => default', animate('2000ms ease-out')),
       transition('default => highlight', animate('200ms ease-in'))
     ])
-  ]
+  ],
+  providers: [IsAllowedService],
 })
 export class SnippetComponent implements OnInit {
 
@@ -74,7 +76,7 @@ export class SnippetComponent implements OnInit {
   showImage: boolean;
 
   timerId = null;
-  _enableEdit: boolean;
+  _enableEdit = {update: false, delete: false};
   snippetIsAccessedByAnotherUser = false;
   avatarHash = "anotherUser";
 
@@ -99,7 +101,8 @@ export class SnippetComponent implements OnInit {
     private sanitizer: DomSanitizer,
     public dialog: MatDialog,
     private logbookItemDataService: LogbookItemDataService,
-    private userPreferences: UserPreferencesService) { }
+    private userPreferences: UserPreferencesService,
+    private isActionAllowed: IsAllowedService) { }
 
   ngOnInit(): void {
     if (this.snippet.isMessage) {
@@ -144,6 +147,7 @@ export class SnippetComponent implements OnInit {
       this._hideMetadata = true;
     }
     // enable edit for snippet
+    this.isActionAllowed.snippet = this.snippet;
     this.enableEdit = true;
     this._subsnippets = new BehaviorSubject(this.snippet.subsnippets);
   }
@@ -163,41 +167,13 @@ export class SnippetComponent implements OnInit {
       });
   }
 
-
-  public get enableEdit(): boolean {
+  public get enableEdit(): any {
     return this._enableEdit;
   }
 
-
   public set enableEdit(v: boolean) {
-    if (v) {
-      // check if user a member of the ownerGroup before enabling access
-      if (this.allowEdit()) {
-        this._enableEdit = v;
-      }
-    } else {
-      this._enableEdit = v;
-    }
-
-  }
-
-  allowEdit() {
-    let _hasAccessPermission = false;
-    if (typeof this.userPreferences.userInfo.roles != 'undefined') {
-      _hasAccessPermission = this.userPreferences.userInfo.roles.some(entry => {
-        return this.snippet.readACL?.includes?.(entry)
-      });
-    }
-
-    let _isExpired = false;
-    if (typeof this.snippet?.expiresAt == 'undefined') {
-      _isExpired = true;
-    } else {
-      let _expirationTime = Date.parse(this.snippet.expiresAt);
-      _isExpired = _expirationTime < Date.now()
-    }
-
-    return (_hasAccessPermission && !_isExpired)
+    this._enableEdit.update = this.isActionAllowed.canUpdate() && v;
+    this._enableEdit.delete = this.isActionAllowed.canDelete() && v;
   }
 
   ngAfterViewChecked(): void {
diff --git a/scilog/src/app/logbook/widgets/todos/todos.component.html b/scilog/src/app/logbook/widgets/todos/todos.component.html
index 1dd9b8c4..69e0afbc 100644
--- a/scilog/src/app/logbook/widgets/todos/todos.component.html
+++ b/scilog/src/app/logbook/widgets/todos/todos.component.html
@@ -10,7 +10,7 @@
  <div *ngFor="let task of tasks; let i=index" >
   <mat-card class="task-mat-card">
     <mat-card-content class="task-content">
-        <mat-checkbox (change)="toggleTaskIsDone(i)" [checked]="task.isDone" >
+        <mat-checkbox (change)="toggleTaskIsDone(i)" [checked]="task.isDone">
           <div >
             
           </div>
diff --git a/scilog/src/app/logbook/widgets/todos/todos.component.spec.ts b/scilog/src/app/logbook/widgets/todos/todos.component.spec.ts
index adafb861..fba8fc71 100644
--- a/scilog/src/app/logbook/widgets/todos/todos.component.spec.ts
+++ b/scilog/src/app/logbook/widgets/todos/todos.component.spec.ts
@@ -38,9 +38,11 @@ const getConfig = () => ({});
 describe('TodosComponent', () => {
   let component: TodosComponent;
   let fixture: ComponentFixture<TodosComponent>;
-
-
+  let isActionAllowedServiceSpy
+ 
   beforeEach(waitForAsync(() => {
+    isActionAllowedServiceSpy = jasmine.createSpyObj("IsAllowedService", ["canUpdate", "canDelete"]);
+    isActionAllowedServiceSpy.tooltips = {update: '', delete: ''};  
     TestBed.configureTestingModule({
       providers:[
         {provide: LogbookInfoService, useClass: LogbookInfoMock},
@@ -65,4 +67,5 @@ describe('TodosComponent', () => {
   it('should create', () => {
     expect(component).toBeTruthy();
   });
+
 });
diff --git a/scilog/src/app/logbook/widgets/todos/todos.component.ts b/scilog/src/app/logbook/widgets/todos/todos.component.ts
index ed050f5f..691b5952 100644
--- a/scilog/src/app/logbook/widgets/todos/todos.component.ts
+++ b/scilog/src/app/logbook/widgets/todos/todos.component.ts
@@ -5,8 +5,6 @@ import { TasksService } from '@shared/tasks.service';
 import { LogbookInfoService } from '@shared/logbook-info.service';
 import { ChangeStreamService } from '@shared/change-stream.service';
 import { Subscription } from 'rxjs';
-import { Basesnippets } from '@model/basesnippets';
-import { Logbooks } from '@model/logbooks';
 import { ViewsService } from '@shared/views.service';
 
 @Component({
@@ -35,7 +33,7 @@ export class TodosComponent implements OnInit {
 
   ngOnInit(): void {
     // get TODOs from server
-    console.log("todo: adding subscriptions")
+    console.log("todo: adding subscriptions");
     this.subscriptions.push(this.tasksService.currentTasks.subscribe(tasks => {
       this.tasks = tasks;
       this.numTasks = this.tasksService.numTasks;
diff --git a/scilog/src/app/overview/add-logbook/add-logbook.component.html b/scilog/src/app/overview/add-logbook/add-logbook.component.html
index 1759cca7..641b80fb 100644
--- a/scilog/src/app/overview/add-logbook/add-logbook.component.html
+++ b/scilog/src/app/overview/add-logbook/add-logbook.component.html
@@ -11,14 +11,14 @@
         <div>
           <mat-form-field appearance="standard" required>
             <mat-label>Title</mat-label>
-            <input matInput placeholder="Title" [formControl]="optionsFormGroup.get('title')" matTooltip="{{ tooltips.expired }}">
+            <input matInput placeholder="Title" [formControl]="optionsFormGroup.get('title')" matTooltip="{{ isActionAllowed.tooltips.expired }}">
             <mat-error *ngIf="optionsFormGroup.get('title').hasError('required')">Please specify the title.</mat-error>
           </mat-form-field>
         </div>
         <div>
           <mat-form-field appearance="standard">
             <mat-label>Location (Beamline or Instrument)</mat-label>
-            <mat-select [formControl]="optionsFormGroup.get('location')" (selectionChange)="selectLocation($event)" matTooltip="{{ tooltips.expired }}">
+            <mat-select [formControl]="optionsFormGroup.get('location')" (selectionChange)="selectLocation($event)" matTooltip="{{ isActionAllowed.tooltips.expired }}">
               <ng-container *ngFor="let location of availLocations">
                 <mat-option [(value)]="location.id">{{ location?.location }}</mat-option>
               </ng-container>
@@ -36,7 +36,7 @@
           <mat-form-field appearance="standard" required>
             <mat-label>ownerGroup</mat-label>
             <input matInput placeholder="ownerGroup" [matAutocomplete]="autoOwnerGroup"
-              [formControl]="optionsFormGroup.get('ownerGroup')" matTooltip="{{ tooltips.ownerGroup }}">
+              [formControl]="optionsFormGroup.get('ownerGroup')" matTooltip="{{ isActionAllowed.tooltips.ownerGroup }}">
             <mat-error *ngIf="optionsFormGroup.get('ownerGroup').hasError('required')">Please specify the owner
               group.
             </mat-error>
@@ -76,12 +76,12 @@
           </mat-form-field>
         </div>
         <div>
-          <mat-slide-toggle [formControl]="optionsFormGroup.get('isPrivate')" matTooltip="{{ tooltips.expired }}">private</mat-slide-toggle>
+          <mat-slide-toggle [formControl]="optionsFormGroup.get('isPrivate')" matTooltip="{{ isActionAllowed.tooltips.expired }}">private</mat-slide-toggle>
         </div>
         <div>
           <mat-form-field appearance="standard" required>
             <mat-label>Description</mat-label>
-            <textarea matInput placeholder="Description" [formControl]="optionsFormGroup.get('description')" matTooltip="{{ tooltips.expired }}"></textarea>
+            <textarea matInput placeholder="Description" [formControl]="optionsFormGroup.get('description')" matTooltip="{{ isActionAllowed.tooltips.expired }}"></textarea>
           </mat-form-field>
         </div>
       </form>
@@ -90,7 +90,7 @@
       <img mat-card-image [src]="imageToShow" alt="" *ngIf="imageLoaded" />
       <div>
         <input style="display: none" type="file" (change)="onFileChanged($event)" #fileInput>
-        <button color="accent" aria-label="Thumbnail" class="mat-fab-bottom-right" (click)="fileInput.click()" disabled="{{ tooltips.expired }}" matTooltip="{{ tooltips.expired }}">
+        <button color="accent" aria-label="Thumbnail" class="mat-fab-bottom-right" (click)="fileInput.click()" disabled="{{ isActionAllowed.tooltips.expired }}" matTooltip="{{ isActionAllowed.tooltips.expired }}">
           {{ thumbnailText }}
         </button>
         <button color="accent" aria-label="RemoveThumbnail" class="mat-fab-bottom-right" (click)="removeThumbnail()"
diff --git a/scilog/src/app/overview/add-logbook/add-logbook.component.spec.ts b/scilog/src/app/overview/add-logbook/add-logbook.component.spec.ts
index 4231aa57..254a44cc 100644
--- a/scilog/src/app/overview/add-logbook/add-logbook.component.spec.ts
+++ b/scilog/src/app/overview/add-logbook/add-logbook.component.spec.ts
@@ -8,6 +8,7 @@ import { LogbookDataService, LogbookItemDataService } from '@shared/remote-data.
 import { of } from 'rxjs';
 import { MatChipInputEvent } from '@angular/material/chips';
 import { SnackbarService } from 'src/app/core/snackbar.service';
+import { IsAllowedService } from '../is-allowed.service';
 
 class UserPreferencesMock {
   userInfo = {
@@ -27,6 +28,7 @@ describe('AddLogbookComponent', () => {
   let logbookItemDataServiceSpy:any;
   let logbookDataSpy:any;
   let snackBarSpy: SnackbarService;
+  let isActionAllowedService: IsAllowedService;
 
   logbookItemDataServiceSpy = jasmine.createSpyObj("LogbookItemDataService", ["getFile"]);
   logbookItemDataServiceSpy.getFile.and.returnValue([]);
@@ -46,7 +48,8 @@ describe('AddLogbookComponent', () => {
         {provide: LogbookItemDataService, useValue: logbookItemDataServiceSpy},
         {provide: UserPreferencesService, useClass: UserPreferencesMock},
         {provide: LogbookDataService, useValue: logbookDataSpy},
-        {provide: SnackbarService, useValue: snackBarSpy}
+        {provide: SnackbarService, useValue: snackBarSpy},
+        {provide: IsAllowedService, useClass: isActionAllowedService}
       ],
     })
       .compileComponents();
@@ -112,49 +115,28 @@ describe('AddLogbookComponent', () => {
   });
 
   [
-    {input: ['roles'], output: true},
-    {input: [], output: false}
-  ].forEach((t, i) => {
-    it(`should test isAdmin ${i}`, () => {
-      component['logbook'] = {adminACL: t.input};
-      expect(component['isAdmin']()).toEqual(t.output);
-    });
-  });
-
-  [
-    {input: '2200-12-12T00:00:00Z', output: undefined},
-    {input: '2023-12-12T00:00:00Z', output: jasmine.anything()}
-  ].forEach((t, i) => {
-    it(`should test hasExpired ${i}`, () => {
-      component['logbook'] = {expiresAt: t.input};
-      component['setExpiredTooltip']();
-      expect(component.tooltips.expired).toEqual(t.output);
-      });
-  });
-
-  [
-    {input: ['roles'], output: [undefined, false]},
-    {input: ['admin'], output: [`Only members of 'admin' can change the ownerGroup`, true]}
+    true,
+    false
   ].forEach((t, i) => {
     it(`should test setOwnerGroupWithEditability ${i}`, () => {
-      component['logbook'] = {adminACL: t.input, ownerGroup: 'ownerGroup'};
+      component['logbook'] = {ownerGroup: 'ownerGroup'};
+      spyOn(component['isActionAllowed'], 'canChangeOwnerGroup').and.returnValue(t)
       component['setOwnerGroupWithEditability']();
-      expect(component.tooltips.ownerGroup).toEqual(t.output[0] as string);
-      expect(component['getForm']('ownerGroup').disabled).toEqual(t.output[1] as boolean);
+      expect(component['getForm']('ownerGroup').disabled).toEqual(!t);
     });
   });
 
   [
-    {input: undefined, output: false},
-    {input: 'Expired', output: true}
+    true,
+    false
   ].forEach((t, i) => {
     it(`should test setWithEditability ${i}`, () => {
-      component.tooltips.expired = t.input;
-      component['logbook'] = {name: 'a', location: 'b', expiresAt: t.input};
+      component['logbook'] = {name: 'a', location: 'b'};
+      component['isActionAllowed'].tooltips.expired = t? 'Expired': '';
       component['setWithEditability']('title');
       component['setWithEditability']('location');
-      expect(component['getForm']('title').disabled).toEqual(t.output);
-      expect(component['getForm']('location').disabled).toEqual(t.output);
+      expect(component['getForm']('title').disabled).toEqual(t);
+      expect(component['getForm']('location').disabled).toEqual(t);
     });
   });
 
@@ -183,14 +165,13 @@ describe('AddLogbookComponent', () => {
   });
 
   [
-    {input: {adminACL: ['roles']}, output: 0},
-    {input: {adminACL: []}, output: 1},
-    {input: {expiresAt: '2023-12-12T00:00:00Z'}, output: true},
-    {input: {expiresAt: '2200-12-12T00:00:00Z'}, output: false},
+    {input: {isAdmin: true}, output: 0},
+    {input: {isAdmin: false}, output: 1},
+    {input: {expired: 'expired'}, output: true},
+    {input: {expired: undefined}, output: false},
   ].forEach((t, i) => {
     it(`should test setDefaults on update ${i}`, () => {
       component.logbook = {
-        ...t.input, 
         ownerGroup: 'ownerGroup', 
         accessGroups: ['accessGroups'],
         name: 'name',
@@ -199,6 +180,10 @@ describe('AddLogbookComponent', () => {
         isPrivate: true,
       }
       const ownerGroupValidatorsSpy = spyOn(component['getForm']('ownerGroup'), 'addValidators');
+      spyOn(component['isActionAllowed'], 'isAdmin').and.returnValue(t.input.isAdmin);
+      spyOn(component['isActionAllowed'], 'isNotExpired');
+      spyOn(component['isActionAllowed'], 'canChangeOwnerGroup');
+      component['isActionAllowed'].tooltips.expired = t.input.expired;
       component['setDefaults']();
       expect(component['getForm']('ownerGroup').value).toEqual('ownerGroup');
       expect(component['getForm']('title').value).toEqual('name');
@@ -206,9 +191,9 @@ describe('AddLogbookComponent', () => {
       expect(component['getForm']('location').value).toEqual('location');
       expect(component['getForm']('isPrivate').value).toEqual(true);
       expect(component.accessGroups.value).toEqual(['accessGroups']);
-      if (t.input.adminACL)
+      if ('isAdmin' in t.input)
         expect(ownerGroupValidatorsSpy).toHaveBeenCalledTimes(t.output as number);
-      if (t.input.expiresAt) {
+      if ('expired' in t.input) {
         expect(component['getForm']('description').disabled).toEqual(t.output as boolean);
         expect(component['getForm']('title').disabled).toEqual(t.output as boolean);
         expect(component['getForm']('location').disabled).toEqual(t.output as boolean);
diff --git a/scilog/src/app/overview/add-logbook/add-logbook.component.ts b/scilog/src/app/overview/add-logbook/add-logbook.component.ts
index e6bc98c1..cb82e755 100644
--- a/scilog/src/app/overview/add-logbook/add-logbook.component.ts
+++ b/scilog/src/app/overview/add-logbook/add-logbook.component.ts
@@ -11,6 +11,7 @@ import { UserPreferencesService } from '@shared/user-preferences.service';
 import { Logbooks } from '@model/logbooks';
 import { LogbookDataService, LogbookItemDataService } from '@shared/remote-data.service';
 import { SnackbarService } from 'src/app/core/snackbar.service';
+import { IsAllowedService } from '../is-allowed.service';
 
 function ownerGroupMemberValidator(groups: string[]): ValidatorFn {
   return (control: AbstractControl): { forbiddenGroup: {value: string} } | null => {
@@ -29,7 +30,8 @@ function groupCreationValidator(control: AbstractControl): { anyAuthGroup: {valu
 @Component({
   selector: 'app-add-logbook',
   templateUrl: './add-logbook.component.html',
-  styleUrls: ['./add-logbook.component.css']
+  styleUrls: ['./add-logbook.component.css'],
+  providers: [IsAllowedService]
 })
 export class AddLogbookComponent implements OnInit {
 
@@ -105,8 +107,6 @@ export class AddLogbookComponent implements OnInit {
   filteredAccessGroups: Observable<string[]>;
   filteredOwnerGroups: Observable<string[]>;
   accessGroupsAvail: string[] = [];
-  tooltips: {ownerGroup?: string, expired?: string} = {};
-
 
   @ViewChild('accessGroupsInput') accessGroupsInput: ElementRef<HTMLInputElement>;
   @ViewChild('auto') matAutocomplete: MatAutocomplete;
@@ -119,6 +119,7 @@ export class AddLogbookComponent implements OnInit {
     private userPreferences: UserPreferencesService,
     private logbookDataService: LogbookDataService,
     private snackBar: SnackbarService,
+    protected isActionAllowed: IsAllowedService,
     @Inject(MAT_DIALOG_DATA) data) {
     this.optionsFormGroup = fb.group({
       hideRequired: new UntypedFormControl(false),
@@ -131,8 +132,8 @@ export class AddLogbookComponent implements OnInit {
       isPrivate: new UntypedFormControl(false)
     });
     this.logbook = data;
+    this.isActionAllowed.snippet = data;
     console.log("inputData: ", data);
-
   }
 
   ngOnInit(): void {
@@ -154,39 +155,24 @@ export class AddLogbookComponent implements OnInit {
 
   private setOwnerGroupWithEditability() {
     this.setForm('ownerGroup');
-    if (!this.logbook.ownerGroup || this.isAdmin()) 
+    if (this.isActionAllowed.canChangeOwnerGroup()) 
       return
     this.getForm('ownerGroup').disable();
-    this.tooltips.ownerGroup = `Only members of '${this.logbook.adminACL}' can change the ownerGroup`;
-  }
-
-  private isAdmin() {
-    return this.accessGroupsAvail.some(group => this.logbook?.adminACL?.includes(group));
-  }
-
-  private setExpiredTooltip() {
-    const expiresAt =  new Date(this.logbook.expiresAt);
-    if (!expiresAt || expiresAt > new Date()) return;
-    const expiresString = expiresAt.toLocaleDateString(
-      'en-GB', 
-      {year: '2-digit', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'}
-    );
-    this.tooltips.expired = `Editing time (${expiresString}) has passed`;
   }
 
   private setWithEditability(toKey: string) {
     let fromKey: string;
     if (toKey === 'title') fromKey = 'name';
     this.setForm(toKey, fromKey ?? toKey);
-    if (this.tooltips.expired) this.getForm(toKey).disable();
+    if (this.isActionAllowed.tooltips.expired) this.getForm(toKey).disable();
   }
 
   setDefaults(){
     this.accessGroupsAvail = this.userPreferences.userInfo?.roles;
-    if (!this.isAdmin())
+    if (!this.isActionAllowed.isAdmin())
       this.getForm('ownerGroup').addValidators(ownerGroupMemberValidator(this.accessGroupsAvail));
     if (this.logbook) {
-      this.setExpiredTooltip();
+      this.isActionAllowed.isNotExpired();
       ['title', 'description', 'location', 'isPrivate'].map(field => this.setWithEditability(field));
       this.setOwnerGroupWithEditability();
       this.accessGroups.setValue(this.logbook.accessGroups);
diff --git a/scilog/src/app/overview/is-allowed.service.spec.ts b/scilog/src/app/overview/is-allowed.service.spec.ts
new file mode 100644
index 00000000..95834551
--- /dev/null
+++ b/scilog/src/app/overview/is-allowed.service.spec.ts
@@ -0,0 +1,85 @@
+import { TestBed } from "@angular/core/testing";
+import { IsAllowedService } from "./is-allowed.service";
+import { UserPreferencesService } from "../core/user-preferences.service";
+
+describe('IsAllowedService', () => {
+  let service: IsAllowedService;
+
+  beforeEach(() => {
+    TestBed.configureTestingModule({
+      providers: [
+        IsAllowedService,
+        { provide: UserPreferencesService, useValue: {userInfo: {roles: ['roles']}} },
+      ],
+    });
+    service = TestBed.inject(IsAllowedService);
+  });
+
+  it('should be created', () => {
+    expect(service).toBeTruthy();
+  });
+
+
+[
+    {input: '2200-12-12T00:00:00Z', output: ''},
+    {input: '2023-12-12T00:00:00Z', output: jasmine.anything()}
+  ].forEach((t, i) => {
+    it(`should test isNotExpired ${i}`, () => {
+      service.snippet = {expiresAt: t.input};
+      expect(service.isNotExpired()).toEqual(!t.output? true: false);
+      expect(service.tooltips.expired).toEqual(t.output);
+      });
+  });
+
+  [
+    {input: ['roles'], output: []},
+    {input: ['someOtherRole'], output: ['someOtherRole', 'admin']}
+  ].forEach((t, i) => {
+    it(`should test otherEnabledMembers ${i}`, () => {
+      service.snippet = {adminACL: t.input};
+      expect(service['otherEnabledMembers']('admin')).toEqual(t.output);
+    });
+  });
+
+  [
+    {input: ['roles'], output: undefined},
+    {input: ['someOtherRole'], output: "Enabled for members of 'someOtherRole,admin'"}
+  ].forEach((t, i) => {
+    it(`should test isUserAllowed ${i}`, () => {
+      service.snippet = {updateACL: t.input};
+      expect(service.isUserAllowed('update')).toEqual(!t.output ? true: false);
+      expect(service.tooltips.update).toEqual(t.output);
+    });
+  });
+
+  [
+    {input: [[], []], output: undefined},
+    {input: [['someUpdate'], ['someDelete', 'admin']], output: "Enabled for members of 'someUpdate,someDelete,admin'"}
+  ].forEach((t, i) => {
+    it(`should test isAnyEditAllowed ${i}`, () => {
+      spyOn<any>(service, 'otherEnabledMembers').and.returnValues(...t.input);
+      expect(service.isAnyEditAllowed()).toEqual(!t.output ? true: false);
+      expect(service.tooltips.edit).toEqual(t.output);
+    });
+  });
+
+  [
+    {input: {expired: undefined, check: true}, output: 'Update'},
+    {input: {expired: undefined, check: false}, output: 'Update'},
+    {input: {expired: '', check: false}, output: 'Update'},
+    {input: {expired: '', check: true}, output: 'Update'},
+    {input: {expired: 'Expired', check: false}, output: 'Expired'},
+    {input: {expired: 'Expired', check: true}, output: 'Expired'},
+  ].forEach((t, i) => {
+    it(`should test cascadeExpiration ${i}`, () => {
+      service.tooltips.expired = t.input.expired;
+      spyOn(service, 'isNotExpired').and.returnValue(t.input.check);
+      spyOn(service, 'isUserAllowed').and.returnValue(true);
+      service.tooltips.update = 'Update';
+      expect(service['cascadeExpiration']('update')).toEqual(t.output === 'Expired'? false: true);
+      expect(service.tooltips.update).toEqual(t.output);
+      service['cascadeExpiration']('update');
+    });
+  });
+  
+});
diff --git a/scilog/src/app/overview/is-allowed.service.ts b/scilog/src/app/overview/is-allowed.service.ts
new file mode 100644
index 00000000..b8be7403
--- /dev/null
+++ b/scilog/src/app/overview/is-allowed.service.ts
@@ -0,0 +1,96 @@
+import { Injectable } from "@angular/core";
+import { Logbooks } from "../core/model/logbooks";
+import { UserPreferencesService } from "../core/user-preferences.service";
+import { ChangeStreamNotification } from "../logbook/core/changestreamnotification.model";
+
+
+@Injectable()
+export class IsAllowedService {
+  tooltips: {
+    update?: string,
+    delete?: string,
+    ownerGroup?: string,
+    edit?: string,
+    expired?: string,
+  } = {};
+  snippet: Logbooks | ChangeStreamNotification;
+
+  constructor(private userPreferences: UserPreferencesService){}
+
+  isNotExpired() {
+    const expiresAt = new Date(this.snippet.expiresAt);
+    if (expiresAt > new Date()) {
+      this.tooltips.expired = '';
+      return true
+    }
+    let expiresString = `(${expiresAt.toLocaleDateString(
+        'en-GB', 
+        {year: '2-digit', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit'}
+        )}) `;
+    if (expiresString === '(Invalid Date) ') expiresString = '';
+    this.tooltips.expired = `Editing time ${expiresString}has passed`;
+    return false
+  }
+
+  private otherEnabledMembers(action: string): string[] {
+    const aclMembers = (this.snippet?.[`${action}ACL`] ?? []).filter(
+        (m: string) => m != 'admin').concat('admin');
+    if (this.userPreferences.userInfo?.roles.some((entry: string) =>
+      aclMembers?.includes?.(entry)
+    ))
+      return [];
+    return aclMembers;
+  }
+
+  isUserAllowed(action: string) {
+    const aclMembers = this.otherEnabledMembers(action);
+    if (aclMembers.length === 0)
+      return true;
+    this.tooltips[action] = `Enabled for members of '${aclMembers}'`;
+    return false
+  }
+
+  isAnyEditAllowed() {
+    const groups = ['update', 'delete'].reduce((previousValue, currentValue) => 
+      previousValue.concat(this.otherEnabledMembers(currentValue)),
+      []
+    )
+    if (groups.length === 0)
+      return true
+    this.tooltips.edit = `Enabled for members of '${[...new Set(groups)]}'`;
+    return false
+  }
+
+  isAdmin() {
+    return this.isMemberOf('admin');
+  }
+
+  isMemberOf(action: string) {
+    return this.otherEnabledMembers(action).length === 0;
+  }
+
+  canChangeOwnerGroup() {
+    const adminMembers = this.otherEnabledMembers('admin');
+    if (!this.snippet.ownerGroup || adminMembers.length === 0)
+      return true
+    this.tooltips.ownerGroup = `Only members of '${adminMembers}' can change the ownerGroup`;
+    return false
+  }
+
+  canUpdate() {
+    return this.cascadeExpiration('update')
+  }
+
+  private cascadeExpiration(action: string) {
+    if (this.tooltips.expired === undefined && this.isNotExpired())
+      return this.isUserAllowed(action);
+    else if (!this.tooltips.expired)
+      return this.isUserAllowed(action);
+    this.tooltips[action] = this.tooltips.expired;
+    return false;
+  }
+
+  canDelete() {
+    return this.cascadeExpiration('delete')
+  }
+}
diff --git a/scilog/src/app/overview/logbook-cover/logbook-cover.component.html b/scilog/src/app/overview/logbook-cover/logbook-cover.component.html
index 94d28748..36c68587 100644
--- a/scilog/src/app/overview/logbook-cover/logbook-cover.component.html
+++ b/scilog/src/app/overview/logbook-cover/logbook-cover.component.html
@@ -3,18 +3,18 @@
     <mat-card-title #cardHeader style="font-size: 18px;">{{ logbook?.name }}</mat-card-title>
     <mat-card-subtitle>{{ logbook?.ownerGroup }}</mat-card-subtitle>
     <button mat-icon-button [matMenuTriggerFor]="menu" aria-label="Example icon-button with a menu"
-      class="mat-fab-top-right"  [disabled]="tooltips.edit" matTooltip="{{ tooltips.edit }}">
+      class="mat-fab-top-right"  [disabled]="isActionAllowed.tooltips.edit" matTooltip="{{ isActionAllowed.tooltips.edit }}">
       <mat-icon>more_vert</mat-icon>
     </button>
     <mat-menu #menu="matMenu">
-      <span [matTooltip]="tooltips.update">
-        <button mat-menu-item (click)="editLogbook()" [disabled]="tooltips.update">
+      <span [matTooltip]="isActionAllowed.tooltips.update">
+        <button mat-menu-item (click)="editLogbook()" [disabled]="isActionAllowed.tooltips.update">
           <mat-icon>edit</mat-icon>
           <span>Edit</span>
         </button>
       </span>
-      <span [matTooltip]="tooltips.delete">
-        <button mat-menu-item (click)="deleteLogbook()" [disabled]="tooltips.delete">
+      <span [matTooltip]="isActionAllowed.tooltips.delete">
+        <button mat-menu-item (click)="deleteLogbook()" [disabled]="isActionAllowed.tooltips.delete">
           <mat-icon>delete</mat-icon>
           <span>Delete</span>
         </button>
diff --git a/scilog/src/app/overview/logbook-cover/logbook-cover.component.spec.ts b/scilog/src/app/overview/logbook-cover/logbook-cover.component.spec.ts
index 0294bfcc..966eafbc 100644
--- a/scilog/src/app/overview/logbook-cover/logbook-cover.component.spec.ts
+++ b/scilog/src/app/overview/logbook-cover/logbook-cover.component.spec.ts
@@ -73,24 +73,10 @@ describe('LogbookWidgetComponent', () => {
   });
 
 
-  [
-    {input: ['roles'], output: ['updateRole']},
-    {input: ['updateRole'], output: []},
-    {input: ['admin'], output: []}
-  ].forEach((t, i) => {
-    it(`should test enable members ${i}`, () => {
-      component['userPreferences'].userInfo.roles = t.input;
-      const groups = component['enabledMembers']('update');
-      expect(groups).toEqual(t.output);
-      if (t.output.length > 0)
-        expect(component.tooltips.update).toEqual(`Enabled for members of '${t.output.concat('admin')}'`);
-    });
-  });
-
   it('should test enableActions', () => {
+    const isAnyEditAllowedSpy = spyOn(component['isActionAllowed'], 'isAnyEditAllowed');
     component['enableActions']();
-    expect(component.tooltips.update).toEqual(`Enabled for members of 'updateRole,admin'`);
-    expect(component.tooltips.delete).toEqual(`Enabled for members of 'deleteRole,admin'`);
-    expect(component.tooltips.edit).toEqual(`Enabled for members of 'updateRole,deleteRole,admin'`);
+    expect(isAnyEditAllowedSpy).toHaveBeenCalledTimes(1);
   });
+
 });
diff --git a/scilog/src/app/overview/logbook-cover/logbook-cover.component.ts b/scilog/src/app/overview/logbook-cover/logbook-cover.component.ts
index 7ed603a5..8cbd5037 100644
--- a/scilog/src/app/overview/logbook-cover/logbook-cover.component.ts
+++ b/scilog/src/app/overview/logbook-cover/logbook-cover.component.ts
@@ -1,13 +1,14 @@
 import { Component, OnInit, EventEmitter, Output, Input, ViewChild, ElementRef } from '@angular/core';
-import { UserPreferencesService } from '@shared/user-preferences.service';
 import { Logbooks } from '@model/logbooks';
 import { LogbookInfoService } from '@shared/logbook-info.service';
 import { LogbookItemDataService } from '@shared/remote-data.service';
+import { IsAllowedService } from '../is-allowed.service';
 
 @Component({
   selector: 'app-logbook-cover',
   templateUrl: './logbook-cover.component.html',
-  styleUrls: ['./logbook-cover.component.css']
+  styleUrls: ['./logbook-cover.component.css'],
+  providers: [IsAllowedService]
 })
 export class LogbookWidgetComponent implements OnInit {
 
@@ -22,12 +23,11 @@ export class LogbookWidgetComponent implements OnInit {
 
   imageToShow: any;
   isImageLoading: boolean;
-  tooltips: {edit?: string, update?: string, delete?: string} = {};
 
   constructor(
     private logbookItemDataService: LogbookItemDataService,
-    private userPreferences: UserPreferencesService,
-    private logbookInfo: LogbookInfoService) { }
+    private logbookInfo: LogbookInfoService,
+    protected isActionAllowed: IsAllowedService) { }
 
   ngOnInit(): void {
     if (this.logbook?.thumbnail) {
@@ -36,23 +36,9 @@ export class LogbookWidgetComponent implements OnInit {
     this.enableActions();
   }
 
-  private enabledMembers(action: string): string[] {
-    const aclMembers = this.logbook?.[`${action}ACL`];
-    if (this.userPreferences.userInfo?.roles.some((entry: string) =>
-      aclMembers?.includes?.(entry) || entry === 'admin'
-    ))
-      return [];
-    this.tooltips[action] = `Enabled for members of '${aclMembers.filter((m: string) => m != 'admin').concat('admin')}'`;
-    return aclMembers;
-  }
-
   private enableActions() {
-    const groups = ['update', 'delete'].reduce((previousValue, currentValue) => 
-      previousValue.concat(this.enabledMembers(currentValue)),
-      []
-    )
-    if (groups.length > 0)
-      this.tooltips.edit = `Enabled for members of '${[...new Set(groups.concat('admin'))]}'`;
+    this.isActionAllowed.snippet = this.logbook;
+    this.isActionAllowed.isAnyEditAllowed();
   }
 
   ngAfterViewInit() {