Cannot update, destroy when not full login

Fixes VOV-2530.  The logic in the ability class is too complex and needs to be cleaned up.