Global permissions

Work through all endpoints that don't have permissions defined and defined some.