xp
xp copied to clipboard
merge with existing permissions
API should allow to change permissions by adding/removing them, not just overriding