weak_service_permissions