Permission config is an AND condition