NFTs aren’t permissioned by end users. The person that deployed the smart contract still controls all permissions (although they can’t change it later — that is the only difference).

The reason that you can trade a NFT is because the smart contract has an API written by the creator to allow it.