new permissions screen implementation

when #9196 is done, we can implement the according UX, which this issue tracks.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information