Moved Permission class into User app