fixes bug 931242 - more fine grained permissions on data access, r=adrian