Define gis permissions (thanks Bart).