A simple authorization/permission system with JSON as a backend store