New blog post: understanding permission.