Added checks to ensure only users with correct permissions can perform actions on all objects. Also now allow admins to do everything.