Is there an API to fetch the available permissions? We could then use them instead of hard coding values (this is ok for now)