HUE-950 [core] New Permissions API