`permission` is a bit ambiguous. Why not `granted` or `allowed`?