Storage permissions service (baldur)