Update permissions every-freaking-where

[flemingcaleb]

Need to update which positions can see/update/delete vms.

[pastly]

There's a ton that depends on the user being an officer. Maybe some should be for admins too/instead. Maybe students should see more. Maybe the public should see less.

We need to talk.