Dynamic spell permissions