First pass at the permissions