Implement global and group permissions

This makes `#allow_all!` and `#allow_all?` redundant so they were
removed.