added permissions system details, and updated some data architecture
ideas
updated details around design considerations, no decision yet