Managing permissions on an external list