So is the best course now to explicitly link the definitions with their permissions in the application?