Ref permissioning