How are these permissions checked?