support fine-grained permission checks in API
2 files changed