Add permissions

Permissions can't go within the user.profile, since by default that's editable by the client. Unfortunately, doing it this way, you have to manually add a publication/subscription if you want to access permissions on the client.