PermissionOption: "write" | "read" | "full" | "deny"