[UPDATE] Provide interface for permission rules on user & group