Start eliminating hard-coded permission numbers