Added base of permission service

Known bug: no way to change user permissions until log off