Determine what permissions modules expose and add them where relevant

[mathieumg]

• [x] Discuss (start here, now!) what permissions each of our modules should expose.
• [ ] Implement the checks for these permissions where relevant using the existing permissions API.

[mathieumg]

@my-koop/owners Whenever you get a chance!

[mathieumg]

In addition to the current permissions, I suggest we add:

• Users
  • Permissions
  • Create a permission mask
  • List all permission masks
  • List users belonging to a permission mask
  • Update a permission mask
  • Remove a permission mask
  • User profiles
  • Permissions
    • Add a user to a permission mask
    • Remove a user from a permission mask
  • Notes
  • List notes linked to a user
  • Add notes linked to a user
• Memberships
  • Query the membership status of a user
  • Update the membership status of a user
• Volunteering
  • Update own availability periods
  • Query the availability periods of all users
• Mailing Lists
  • Create a mailing list
  • List all mailing lists
  • Send an email to a mailing list
  • Update a mailing list
  • Delete a mailing list
  • Users
  • Add a user to a mailing list
  • Remove a user from a mailing list
• Events
  • Create an event
  • List detailed events
  • Register to/unregister from an event
  • Update an event
  • Start/end an event
  • List notes for an event
  • Add notes for an event
  • Cancel an event
  • Delete an event
  • Users
  • List users registered to an event
  • Register a user to an event
  • Unregister a user from an event
• Invoices
  • Create a new invoice
  • Update an existing invoice
  • List all existing invoices
  • Generate a financial report using existing invoices
  • Close an invoice
  • Reopen an invoice
  • Delete an invoice
• Website
  • Update website settings
  • Update email used to send emails
  • Update taxes used for invoices
  • Update membership fees

Those in italics are not slated for the upcoming 1.0 release.