doc: info regarding permissions