Explain permission checks