Add permissions calls to the Core API

Originally intended to have more than 1 call in this PR, but given that Aranth pointed out that giving permissions to individual characters is a bad idea, I cut that out. I left the separate class in though due to the likelihood that we will add more calls to it in the future.