Notification infrastructure



<!---
@huboard:{"order":236.25,"milestone_order":336,"custom_state":""}
-->

Shouldn't this filter by permissions by default?