Organisation permissions

[RayStick]

Relates to #3

• write a guide doc (check it matches our charter)
• put a message in slack giving people a heads up that they may get emails about permission changing - explain why, and message specific individuals/groups as needed
• check/change permissions across the whole org to be in line with this guide doc