There are no need for permissions if the link per discussion is obscure and you use HTTPS. In that case the link is the password