prevent submit when permissions are empty

this needs some proper highlighting when validation fails, tough
issue #254