Granular space permissions