LPS-49402 Make Alloy MVC permissioning easier to extend/override