better permissions checks on drag
Stacks now honor workflow