corrected the permissions to stop using the user permissions directly;
added a check to see if the user can even view the object before displaying it in the list - therefore, a "secret" item is really completely hidden;
added a check to only display the delete button if the user can edit both Users in general and the object specifically;
Resolves: http://bugs.web2project.net/view.php?id=1237;

FYI:  these changes make it possible to lock yourself out of an item.. and have it completely disappear without a trace.