Implement permissions API and update README.