::: core.api_permissions