changed permussions: normal users now just view no change permission