Split permission management off into a separate promise
Added comments