Using default permissions, i.e. not manage portlet but manage own portlets