Very basic site-level permission editing

Only via the admin dashboard, and you can only add, not remove,
permissions.