Permissions

Goals

• Apps should probably not be allowed to read attributes they didn’t explicitly request access to
  • (there should be an option “Unless they created the node”)

Design