SSF : Default permissions, admin approval on new permissions