Basic work

There'll also be an "admin" permission to allow deletion and similar stuff.