Permissions UI

Use Underscore `_.each`. I know that `forEach` is now well supported, but let's stay consistent.