Allow assigning permissions to top level items in order to filter out wh...

...ere and by whom they can be instantiated