Fixed submit ding

Permissions changed in ajax.py for per-function permission restriction