Here are suggestions, ideas, discussion about a standard permissions API