fixed access contol call errors so that more than just a superuser can list and update dois