Inter-app access control with permission authentication