Add complex permissions

This makes it possible to accept or reject a request based on anything
you might want for all methods.