XML file with permissions