All of this permissions page talk is getting tiresome. People who have ideas should make contrib modules that add a tab to the usual access control page and then the favorite will eventually get integrated into core. This page is not very hard to reproduce, especially when you have a working example already in core.