public function handle($data)
 {
     $this->validate_request(["permission"]);
     $profile = UserBackend::fetch_user_profile($this->params["id"]);
     $permission = $data->{"permission"};
     UserBackend::set_user_permission($profile, $permission, true);
     return ["user" => $profile->toExternalForm(), "permission" => $permission];
 }
 private function handlePost($data)
 {
     $profile = UserBackend::fetch_user_profile($this->params["id"]);
     UserBackend::set_user_permission($profile, $this->params["permission"], false);
     return [];
 }