In that case the permissions would be publicly accessible, but where and how is the data stored then? And who is enforcing the permissions and how? Unless you want to host the data yourself (negating the usefulness of a public permissions system), you need to store them on some trusted authority.