WEB-4590 - known uri controller restrictions. Tested, even.
WEB-4592 - there's a global site config (defaulting to true for now) that allows all usersto see the data tab. There's also a user permission for see_data, if that's false. Also worth noting is a re-write of the global_site_warning, which is now handled in the class.
A lot of spec-fixing. So it goes.
Green!  It was green!  Yay.