added permissions api to charter
Merge branch 'master' of https://github.com/w3c/webappsec