Fixes #1, the path is standardised and all symlinks resolved prior to looking up bookmark data, because the allow permissions window would do this automatically with the URL it returned, meaning the URL we’re looking up may already have permission.