Fix users having more command access than they should. Fixes #386