dicval permissions via config