add created_by user_id
added created_by params to controllers
prevent stack overflow potential in draw
added permissions
refactor notices and alerts