fixes #316 - Account with "no access to manage" can still manage some things.