That may be less useful for my specific use case because I want to eval not only which permissions exist but whether I have them -- good example is looking at files in a directory. Less interested in knowing that there is the 'concept' of reading/writing/executing and more about whether I can read write or execute... if that makes sense. That's assuming I read the feature title correctly. I say that because the application does know which perms it wants, it just doesn't know if they're allowed without having to check each one for every resource independently