*This makes permission checking much more modular; allows restrictive and granting module to be made without modifying the existing permission module
*This makes permission checking much more modular; allows restrictive and granting module to be made without modifying the existing permission module