Permission-driven user interface