Don't grant more permissions than user needs.