*actually* fixed user edit/view privileges