what do you mean by authentication based on permissions?