Permission modes, in depth