The API documentation, although it does contain oversights and omissions, is a great place to start, and many developers have most likely worked through the same permissions-related problems that you may be facing and are willing to share such information.