add discussion of server permissions