Please see the permissions page for a detailed list of which are needed and why.