ox-it/wl-authz — pull request #4 by buckett (2014-04-04 15:25:42+00:00)
Title: WL-3229 Limit what permissions can be changed.

This defines:
- frozen permissions (can't be changed).
- add only permissions (can only be granted).