lots of bug fixes/permission corrects

thanks to @_motors_ for helping point out countless permission
overlooks. Most should be corrected now. Hopefully.