[security-dev] Permission API, Implementation and Quickstart