RW/RO in permission