Documented built-in permissions handler