set...list: enforce permission only once