S3, permissions