Implement Permissions checks into Core

I may have missed some spots...
Granting a spy-checker the ability to view information on a suspicious character/account