Yes, permissions are missing.

I don't understand the second point.

Reply to this note

Please Login to reply.

Discussion

I think, at least for the first draft, it will be a read-only drive for everyone except the user who creates it. Handling write permissions would require some way of delegating event signing or deferring original events signed by one user to a replacement signed by another user, which means the event is constantly changing ownership/authorship.