* Guard against non-staff users logging in * Scope channel permissions * Update changelog * Update tests