encapsulation wasn't needed, permissions/roles work in DDT now!