Fix permissions api, close #48