Adding another directory to `app/` doesn't seem to me as the best way to make it easier to find it in the first place. SInce it's part of the plugin definition, I would probably go for `lib/katello/permissions.rb`, where `plugin.rb` file resides as well. I don't mind that much about having them broken out into subfiles (but I don't mind having routes.rb or schema.rb file there either), but I would like to have some consictency there at least, so if you could rise this topic on the mailing list, it would be nice if we could agree on the layout.