App Ops was available briefly and did exactly what you want. Google made it inaccessable in 4.4, claiming it was only intended for testing. It's possible to restore on a rooted device, but more sophisticated solutions are available with root.

At the moment, I use XPrivacy, which has very fine-grained control, confirm-on-use for permissions and the ability to supply fake data. As far as certain apps are concerned, I'm in Pyongyang.