Programs are now ownable in the public (null) context. Also, fixes to
determing when an object is editable via the is_allowed mustache helper
and requiring the check that hte user is authorized for the particular
object to be edited.