any "automatic" system could/would easily get out of hand: imagine if you defined 15 permissions but only needed, say, 3