working on cleaning up the authorization rules for every controller in #ktistec as part of the ongoing multiuser improvements.