Split watched and permit rights for applications