#255 endpoints now carry a dedicated permission

Resolves #255