RFC 40: Grant permissions on user creation and email verification
Created by: unknwon
This PR implements #7679, which basically attempts to grant pending permissions when:
- A user is created
- A email address is verified
Uint tests will be added once people agree that code logics are added in the reasonable places.