generalized permissions system - please adapt your config (see bepasty/config.py or the docs)