corrections to permissions. refs #223
correction in ajax error handling