setting-ize permissions+issue

permissions are currently set by card, making them difficult to configure, administrate, query, etc.

We also want as an outcome here the capability to restrict permission to the creator of a card (e.g. for your account card and associated plus cards). Some way other than add Author role.