canEdit didn't apply, because not everybody can edit, but they should still be able to vote. So canRead is now the permission required.