Basic permissions skeleton, still needs a lot of work