You are right about messaging on permissions. We need to figure out a place for explaining rights requirement to user.