some Auth stuff
fixed entityInteractions permissions