Updated create_permission methods to handle NOACCESS values