Permission specs and added invite fields to users