finished visibility / access permissions for user/creator/admins