PLD: add snippetscream to dev
PLD: attach perms, #440
PLD: determine role from permissions and not users, closes #440
PLD: use user_has_perms in tests
PLD: single class for each permission and tests
UK: add filter and XForm permissions to charts endpoint, closes #456