WIP add global derived permissions to their user's permission hash under the global repository