fixed a nullref and made changing permission update the cloud copy.
also added a permission level restriction on one of the other cloud pushes, that had been neglected.