Add and populate permission model. Add and populate default permissions for each discussion. Use those as basis for ACLs.  ACLs are still in comments.