964 correct permissions dataentry role

closes #964, fixes for dataentry role