Permissions are now handled via events. Provides extensibility.