Add ability to grant & revoke permissions