permission mixin for user classes
Merge remote-tracking branch 'dieselmachine/latest' into release-0.3.0