User Permissions with Apache Shiro and Stormpath | Hacker News Reader