@todo Detailed description of global permissions vs. ACK permissions.