WIP: permissions, misc, straying into views