* Always pass req to apos.getPage and apos.putPage, which are responsible for permissions. However we still check manage-page ourselves when making decisions about adding children, reorganizing, etc.