Users can now list and delete permissions