discussion-specific permissions
API for authentification machinery.