All pages should be privilege-checked. Anything that's
not a 'class' action should be considered an action on
the 'main' or some other sort of object, so privileges
can be databased for these actions (example: view the
member homepage, email the club).