Here should be only **needed** permissions listed (the permissions needed to use this module, not the permissions defined in other modules). See e.g. https://github.com/webyast/webyast/blob/master/plugins/services/restdoc/api.txt#L33