How does the permission model work?

The permission model is opt-in. By default TLP permissions are enforced. If you want more granular permissions you can enforce an ownership model. The creator or designated owners of a cluster must approve attribution and edits to their cluster.