PLINK-268 implement permission entity lookup, refactor permission creation to use a permission set to update operation values