CWE-277 - Insecure inherited permissions