Reorganized permissions document a bit