The authorization issues have been fixed. You can now only view the things that you have submitted. I took a "least permissive access" view, starting with locki

The authorization issues have been fixed. You can now only view the things that you have submitted. I took a "least permissive access" view, starting with locking down everything. Then, through a series of tests, opening up additional actions as proven necessary, based on which user owned the object in question. I'm working on a couple of redirect issues, and a broken feature or two today, and expect to have the major kinks worked out by tomorrow morning. Thanks again for trying it out. Much appreciated!