re-work permissions onUserCan logic to follow mw standards per WEB-8378 #6
sanitize title for WEB-8382
merge master to branch for WEB-6276