See contribution based on Grouper permissions at:
https://spaces.at.internet2.edu/display/macepaccman/Permissions+API+suggestion+based+on+Grouper+permissions