Implements public/private permissions, sets expected 404 exceptions in contributor ACL tests.
Shells out contributor exhibit public permissions ACL tests.
Finishes tests for public/private permission enforcement.