Clean down the permission arrays, mongoid and php are ugly as sin FYI