I wouldn't trust any of the permission logic yet.

[ctrager]

View only, Read only users might be able to do more than they should,
Non admin user might be able to do admin type things.

[ctrager]

Now I trust it.