access controls on articles, unauthorized redirect changes