Use narrow UserIdentity in PermissionManager where possible

Almost all of this code still needs a full User object. Still I
found a few places that can easily live with the much more narrow
UserIdentify interface.

Change-Id: I6a43f8acbb7470144a4118d86aa1b266d4e293f4