Security - Rule/expression based permissions

Implement the EXPRESSION IPermission type and add permissions as needed to enforce security constraints.

IPermission is essentially an assertion, or predicate that should evaluate to true if a principal is able to perform the action implied by the permission on a given object. This can be used to implement policies like "only admins in a given security realm can delete users in that realm".