Permission API

Changes to POST /delete-permission

post/delete-permission