wip
Rewrite permissions service to use action handlers
API calls to verify pp user who granted permssions