very basic front end permission stuff
creating occasion admin stuff and basic permissions. some positions have the power to do everything