Where does Android keep app permissions?
App permissions are defined in the code of the application (the manifest to be exact) and cannot be changed without actually "un-building", changing and then rebuilding the apk again.
the solution you're looking for is using permissions controlling/restricting applications.

Here are some examples for these kind of apps:

LBE Privacy Guard

PDroid

App Ops - Permission Manager