Allowed per-plugin user permissions