finished off backend changes for all necessary permissions changes
frontend changed to use new permissions