User model: Hide UI elements that the current user has no permissions to

[msm-code]

Part of #23

Relatively straightforward.

Right now permissions are enforced, and user will see a red error bar when they try to do something they're not allowed to.

Inaccessible elements should just be hidden.