Use all_urls as permissions