Fix RBAC and add support for user selected permissions

Sorry, had an Logical Mistake there