Function set_user_permissions 

pub fn set_user_permissions(
    conn: &Connection,
    user_id: &str,
    permissions: &[PermissionRecord],
) -> Result<(), String>

Atomically replaces all permissions for a user.