CrudDatastream now supports safe addition/removal of permissions into correct CRUD groups through a fairly intuitive interface.