permission compatibility with tokens