Support for multiple permission rules

The UI supports only adding a single rule, which hinders orchestration of more complex policies. The backend logic is very hard-coded ATM, and functionality for adding multiple permissions requires a larger logic rethink. Also need to implement the UI functionality to remove rules before submitting.