api_permissions (as a simple getter)