Defined and used permissions

Addresses https://github.com/my-koop/service.website/issues/346 for this module.