re #77 clean up story permission logic