Moved permission scopes and validations into concerns.