You don't need additional permissions for those as long as you are logged in as a dhopper and executing them on the cart/order the shopper owns