572 manager level perms

closes #572
move this into a new permission check that combines w/that on line 69