It's important to get permissions right.