Does anyone with a permanent authentication token have full read and write access to all entities in the database, even if permissions do not allow anyone to read or write? I guess I'm wondering how the owner of a permanent authentication token fits into permissions

@lastmjs Hi Jordan! Permanent Auth Tokens allow full access to your API. We are currently in the process of specifying how it should be combined with the permission system in the future. Please open a feature request if you have some concrete input in that regard 🙂

🙌