How are permissions managed between professionals and end users?