VALIDATION VERSUS PERMISSION