Build out and complete `PermissionProcess`
 - create a couple sub-classes to handle shared logic b/w adding and updating permissions