Hopefully fix error reporting bug
Support permission assignments via groups
Modify permission ancestor to be user/group, fix all unit tests