More updates to support renaming SubmissionSet.submission_type to name
Prevent private data from being returned if it is not requested.
Add permission functions (a work in progress)