Minor fixes for the UI
Fix privilege escalation in campaign controller