Thanks. With a combination of your suggestions, plus some of my own ideas, I think I've got this sorted now.
Can a user have multiple permissions? If not, I would just add a "user_permissions" field to the USERS table, as you suggest. If a user can...
Refresh what? Do you have a database that needs periodically refreshing? If so, you presumably have a script to run - do you know what it's...
Separate names with a comma.