User Permission type instead of strings.
Ability to specifiy a List of Permissions for securing actions