572 manager level perms

closes #572