webapp permissions documentation

Anybody r?

We currently don't have any developer documentation for the webapp. I wanted to write something down about how to extend permissions and saw no other way than to add a new file.