got more work done with the client side permissions editing. Got a POST
sent to server, however need to figure out how to deal with the existing
permissions. Could either do an existing fairly complicated query, roll a
new query, or have the permissions sent up from the client (perhaps the
best idea?)