Authorization: set up permission module

[ezesundayeze]

This is most likely a huge ticket or might not be. If it's we can split the ticket into smaller pieces