SSP-920 - Add and enforce MAP permissions