permissions system use-cases