add doc/permissions.txt