Validate permission refs #2