Hey there :-)
Currently permissions have to be requested in the engine. The underlying gestalt-module system including the sandbox & security stuff *does* have some support for allowing modules to request permissions, but that support hasn't been extended to Terasology yet, if that makes sense...