A first-order theory of permissions