Now that we support external auth, the permissions list is open-ended. Make it a list for simplicity.
Attach a file by drag & drop or click to upload
