Feat/hierarchical permissions

On top of !94 (merged)

Also, I realized that entities were not open by default, which prevented Hibernate to create proxies for lazy ManyToOne associations, and thus made them eager instead of lazy, so I configured Kotlin to make entties open automatically.