I'm okay with this for initial implementation.
Worth documenting some of the vision for using a VIEW_MARKETPLACE_ENTRY permission Activity to model who is allowed to see which portlet marketplace entries in [the wiki page](https://wiki.jasig.org/display/UPC/Marketplace)?