Same questions I have from reading "Build a Solid app in your lunch break", the app leverages the friends stored data but makes no mention of how the permissions system might work.