put permissions warning into a proper warning box (rebased onto develop)



This is the same as gh-484 but rebased onto develop.

----