learning: sanitize path building for flash contents
dashboard: an admin might also be assistant for some groups