Sumada Kaabaha: permissions policy