discard shelve
maybe new names of permissions
new permission system
get user permissions via BaseHandler