[permission model] Redesign