Implement support for variables in permissions