RFC 40: Grant permissions on user creation and email verification

Created by: unknwon

This PR implements #7679 (closed), which basically attempts to grant pending permissions when:

1. A user is created
2. A email address is verified

Uint tests will be added once people agree that code logics are added in the reasonable places.