For now, we can just set the permissions for that action to `always()` for user `1`.  We also need to implement action permits for groups, so we don't have to add a new set of permits for every new user.  I was thinking a separate table, and then the `checkActionPermissions` function could check both a user and a user's groups' permissions.  What do you think?