added permission and groups

Added data access objects and implementations for grabbing a users permission and checking if object should be displayed to the user.