sample approach for documenting permissions