altered required 'design' user role to 'edit', since this is all that's endowed by the auth changes