A code based permission system for Meteor apps