pff: permission revoking - initial commit