Each device should have a set of access permissions per user

[madhephaestus]

Each user should be able to be given yes/no permission per device with specified hours. The option for 24hr access should also be settable.