Enforce AAF permissions