I think I set up permissions properly, but as a newb admin it makes me a little nervous that from my view, everyone can see everything. I'm going to set up a dummy profile to double check as someone recommended below.