Classification permissions

Adds permission controls for classifications. 
I didn't think the group classification query should be pulling classifications for user_groups a member is not active in.