more work on user perms and logging
work on view of user permissions