Cadabia permission framework