Checkpoint commit #2

Can now map permissions to groups