<< How would I go about implementing permissions in EWB2 >>
EWB 2 does not provide any server-side user/session management functionality.
EWB 3 provides all of the above and more, so you should consider using EWB 3 if you want this type of functionality available as built-in features for your client applications.