First draft of new permission api controller
First working version
An important task added