add missing consts
disallow users w/o PERM_BASIC to login