diff --git a/.gitmodules b/.gitmodules
index e9a2c85..0bdfb42 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -34,3 +34,6 @@
 [submodule "backend-pictures"]
 	path = backend-pictures
 	url = git@makerforce.io:beep/backend-pictures.git
+[submodule "backend-permissions"]
+	path = backend-permissions
+	url = git@makerforce.io:beep/backend-permissions.git
diff --git a/backend-core b/backend-core
index 31b305a..1064edc 160000
--- a/backend-core
+++ b/backend-core
@@ -1 +1 @@
-Subproject commit 31b305a9c6699c8329e46be0166adbad7f15db1b
+Subproject commit 1064edce60d2b78546035991455a289b79494896
diff --git a/backend-permissions b/backend-permissions
new file mode 160000
index 0000000..156a0ed
--- /dev/null
+++ b/backend-permissions
@@ -0,0 +1 @@
+Subproject commit 156a0ed950ad1b88402bad357256114fd3a2012e
diff --git a/docker-compose.yml b/docker-compose.yml
index f936da7..7b5b9ae 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -151,6 +151,23 @@ services:
       - traefiknet
       - minionet
 
+  # Permissions
+  permissions:
+    build: ./backend-permissions
+    tty: true
+    restart: unless-stopped
+    depends_on:
+      - redis
+      - pg
+    environment:
+      - LISTEN=:80
+      - POSTGRES=postgresql://root@pg:5432/core?sslmode=disable
+      - REDIS=redis:6379
+    networks:
+      - pgnet
+      - redisnet
+      - permissionsnet
+
   # Pipeline
   bite:
     build: ./backend-bite
@@ -225,3 +242,4 @@ networks:
   redisnet:
   traefiknet:
   minionet:
+  permissionsnet: