Add PERMISSIONS_ENABLED setting

This fixes an ambiguity when applying the permissions if a user is
passed to the published() manager method for DataField and DataConcept.

Fix #252

Signed-off-by: Byron Ruth <b@devel.io>
Same as above regarding missing 'be'