package auth func getPermissions(urlPath string) []string { return nil }