Finally corrected the permissions system for step-level access. #2
Basic handling of denied permissions. The next stage -- where we handle data returned from the value merging systems, is far more interesting, as value merging is OK for both read and modify. It's denied access that makes it hard.