edit permissions nearly done

Just need to polish views and make sure cukes pass