Classification permissions

Adds permission controls for classifications. 
And it doesn't work in JRuby now which handled the first case correctly. I think it must be an issue with the pg activerecord adapter.