Updating person policy

Changed the person policy to use the UserPermissables class so that this that code only needs to be defined in one place.