initial lock permission handling with owners, groups now have leaders, refactoring