. . . "Permissions can be controlled at the API, Collection and Object level, including cascading permissions." .