Permissions creation

[h-m-m]

Summary

Create a set of basic permissions we'll know we need

Things out of Scope

We don't need to put every permission we can think of in this ticket. Feel free to break chunks of permission settings out into other issues that link back to here

Things to Consider

We have a consensus that the Pundit gem is suitable

Criteria for Completion

• Students can place orders for their portfolio and not for any other students

[h-m-m]

This requires #162 to exist first. This can be a good prerequisite step before doing #153