Basics of permission api.  Absolute most low level stuff at this point.