This is given as one of:
+ add the specified permission - subtract the specified permission = assign the specified permission, ignoring whatever may have been set before.