Implement per-world permissions.  User-specific per-world overrides not yet implemented