permissions, user-side permissions settings on datasets, viewing
associated datasets under the role page in the admin controler (is this
even necessary?), filtering out roles by type. I haven't addressed
tests, so the security-related functional tests will fail. I haven't
looked at history sharing yet either. Cleanup to remove unused methods
is needed in the admin controller. And the admin templates are a
bit messy.