[#409] Fixed user permissions

User permissions are now in place, based on the new user model and incorporating multiple organisations per user.