add Permissions.hs, some functions to help init an empty database, hopefully.