Allowing users to control permissions