Move permissions to its own class to avoid module to module reference

Move permissions to its own class to avoid module to module reference #15070