* error modules now hidden via access control
* get_module() returns None if user doesn't have access