where you still ensure that a token has access and...
# zanzibar
j
where you still ensure that a token has access and the specific permission