lecturer has_many permissions; user has_many lecturers through permissions; create lecturer permission if timetable lecturer with email