Read permissions in a single query