RFC: permissions for cost entry