i guess one thing i might do differently is use those synthetic permissions in your

view

and

edit

definitions