There is no initial permission. Anyone with your info can pull money out of your account. A stop payment just blocks a specific person from doing it again.