Permissions moved to app config