permissions: modularize!
fix the checkboxes (should be read-only for now)

if the checked property is null, it's not an controlled input!