More permit stuff

Created update permit api page, expanded backend support for both user
and group-level permits