implemented permission-centric methods in SecurityDao plus corresponding unittests