TC: basic permissions handling (for writing templates)