agartha
In general, permissions follow a whitelist approach:
no operation is permitted unless explicitely allowed