how that permission is computed is up to you