user created objects now are secured to be read-only to the one user. fiddling with local storage caching but it's not there yet.