Alternate version of permissions

[calpaterson]

This code (currently not used) implements an alternate way of checking permissions that will be more flexible.

In particular it's fast (because the permissions check is done through SQL instead of Python) and can easily be expanded to work with "bearer" credentials (ie: share tokens) or RBAC, where the user is a member of a group that grants them extra permissions.