Permission based Auth library