Where are the permissions handled?