adjust setters to require a user to check permissions for.