(1) copy/paste error missing 'model.'
(2) re-using the cursor doesn't work (once to check for privileges, once
to actually set fields); force a list
(3) the default value in the new-style user select widget is "None" and
needs to be "" to make the "don't set" logic work